PT-2006-3771

Name of the Vulnerable Software and Affected Versions Realty Portal version 5.1.5 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the cat parameter in the content.php file. Recommendations For Realty Portal...

CVE-2005-4407: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 content and 2 criteria parameters...

CVE-2005-3861: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in content.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content parameter...

CVE-2004-2042

Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via 1 content parameter to content.php, 2 contentid parameter to content.php, or 3 list parameter to news.php...

CVE-2001-1115: Undefined Security Weakness

generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot .. in the content parameter...