CVE-2007-2262

CVE-2007-2262 corresponds to multiple PHP remote file inclusion vulnerabilities in html/php/detail.php of Sinato jmuffin, enabling remote attackers to execute arbitrary PHP code by supplying a URL via the relPath or folder parameters. The NVD entry cites a CVSS v2 base score of 7.5 (HIGH) with ne...

file117-rfi.txt

File117 Remote File Inclusion Affected Software .: File117 Download..: http://www.sinato.com/jmuffin/upload/file117.zip Risk ..............: high Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............: Www.InyeXion.com.ar Affected File: /html/php/detail.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment fields to 1 scripts/addblogcomment.php and 2 detail.php...

Sql injection

SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a userdetail.php, id and 2 url parameter to b jump.php, and id variable to c detail.php...

CVE-2006-5828

CVE-2006-5828 affects DeltaScripts PHP Classifieds before the 7.2/7.1 release: the vulnerable file is detail.php, where the user_id parameter is used in an SQL query, enabling remote attackers to execute arbitrary SQL commands. The entry explicitly notes a SQL injection vulnerability in DeltaScri...

PHP Classifieds <= 7.1 (detail.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ PHP Classifieds = 7.1 detail.php Remote SQL Injection Exploit ================================================================ !/usr/bin/perl Script Name: Php Classifieds = 7...

PHP Classifieds 7.1 - 'detail.php' SQL Injection

!/usr/bin/perl Script Name: Php Classifieds newProto = "tcp", PeerAddr = "$classifiedsserver", PeerPort = "$classifiedsport" || die "\n+ Connection failed...\n"; print $classifieds "...

CVE-2005-3308

Multiple cross-site scripting XSS vulnerabilities in Zomplog 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 comment parameter in detail.php, 3 the username parameter in get.php, and 4 the search parameter in index.php...

CVE-2005-2430

Multiple cross-site scripting XSS vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the 1 forumid or 2 groupid parameter to forum.php, 3 projecttaskid parameter to task.php, 4 id parameter to detail.php, 5 the text field on the search page, 6 groupid...