CVE-2008-4913

Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary files via a .. dot dot in the delete parameter...

Directory traversal

Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary files via a .. dot dot in the delete parameter...

Sql injection

SQL injection vulnerability in diary.php in My Databook allows remote attackers to execute arbitrary SQL commands via the delete parameter...

CVE-2007-3063

SQL injection vulnerability in diary.php in My Databook allows remote attackers to execute arbitrary SQL commands via the delete parameter...

CVE-2007-3063: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in diary.php in My Databook allows remote attackers to execute arbitrary SQL commands via the delete parameter...

CVE-2007-2338: Undefined Security Weakness

Cross-site request forgery CSRF vulnerability in include/admin/banlist.php in Phorum before 5.1.22 allows remote attackers to perform unauthorized banlist deletions as an administrator via the delete parameter...

CVE-2006-3420

Cross-site request forgery CSRF vulnerability in editpost.php in MyBulletinBoard MyBB before 1.1.5 allows remote attackers to perform unauthorized actions as a logged in user and delete arbitrary forum posts via a bbcode IMG tag with a modified delete parameter in a deletepost action. NOTE: the...

CVE-2006-3405

Cross-site scripting XSS vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 delete, 2 pathext, and 3 edit parameters...

PT-2005-3100 · Plague · Plague News System

Name of the Vulnerable Software and Affected Versions: Plague News System versions 0.6 and earlier Description: The issue allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter in the delete.php file. Recommendations: For Plague News...