CVE-2006-5847

CVE-2006-5847 is a Cross-site scripting (XSS) vulnerability in FreeWebshop 2.2.2 and earlier. The flaw exists in index.php via the cat parameter, allowing remote attackers to inject arbitrary web script or HTML. The provided documents do not include exploitation details, affected versions beyond ...

CVE-2006-5707

SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2006-5512

Cross-site scripting XSS vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-5512

Cross-site scripting XSS vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-5059

Multiple cross-site scripting XSS vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to 1 dosearch.php, 2 postlist.php, 3 showmembers.php, 4 faqenglish.php, 5 online.php, 6 login.php, 7 newuser.php, 8 wwwthreads.php,...

CVE-2006-3932

Gonafish LinksCaffe 3.0 is affected by a SQL injection in links.php, exploitable via the cat parameter, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is documented in CVE-2006-3932 with notes that provenance is from third-party information. According to the availa...

CVE-2006-3153

Cross-site scripting XSS vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-3153

Cross-site scripting XSS vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-3153

The CVE-2006-3153 issue is a cross-site scripting (XSS) vulnerability in index.pl of Ultimate Estate 1.0 and earlier. The vulnerability arises from the cat parameter, enabling remote attackers to inject arbitrary web script or HTML. Affected product: Ultimate Estate (version 1.0 and earlier). Roo...

CVE-2006-3029

Cross-site scripting XSS vulnerability in default.asp in ClickTech Clickcart 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-2955

Multiple cross-site scripting XSS vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 New Category newcategory or 2 apage parameter to a edtalbum.asp, or the 3 cat or 4 albumid parameter to b album.asp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 New Category newcategory or 2 apage parameter to a edtalbum.asp, or the 3 cat or 4 albumid parameter to b album.asp...

CVE-2006-2853

SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Woltlab Burning Board < 2.3.5 links.php cat Parameter SQL Injection

Binary data 3631.prm...

Cross site scripting

Cross-site scripting XSS vulnerability in viewcat.php in geoBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-2177

Cross-site scripting XSS vulnerability in viewcat.php in geoBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

Information disclosure

PhpWebGallery before 1.6.0RC1 allows remote attackers to obtain arbitrary pictures via a request to picture.php without specifying the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 aff and 2 cat parameters...

CVE-2006-1950

Multiple cross-site scripting XSS vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 aff and 2 cat parameters...

CVE-2006-1904

Cross-site scripting XSS vulnerability in index.php in AnimeGenesis Gallery allows remote attackers to inject arbitrary web script or HTML via the cat parameter...