1809 matches found
CVE-2005-1653: Undefined Security Weakness
Cross-site scripting XSS vulnerability in message.htm for Woppoware PostMaster 4.2.2 build 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the email parameter...
CVE-2005-1652: Undefined Security Weakness
message.htm for Woppoware PostMaster 4.2.2 build 3.2.5 allows remote attackers to bypass authentication by modifying the email parameter...
PT-2005-2178 · Oneworld · Oneworldstore
Name of the Vulnerable Software and Affected Versions: OneWorldStore affected versions not specified Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The affected parameters and...
CVE-2005-0818: Undefined Security Weakness
Cross-site scripting XSS vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the 1 email or 2 Jabber parameters...
Multiple vulns in punBB
================================================= SQL Injections in punbb-1.2.1 register.php ================================================= Description ----------- A remote attacker can cause register.php to execute arbitrary SQL statements by supplying malicous values to the language or email...
MySQL Eventum index.php email Parameter XSS
The MySQL Eventum install hosted on the remote web server is vulnerable to a cross-site scripting attack because it fails to sanitize user-supplied input to the 'email' parameter of the 'index.php' script before using it to generate dynamic HTML output. With a specially crafted URL, an attacker c...
CVE-2004-2110
SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the hideemail parameter...
CVE-2004-2720
Cross-site scripting XSS vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter...
CVE-2004-0035
SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hideemail parameter...
CVE-2002-1361: Undefined Security Weakness
overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP Security Hardening Patch installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter...
Snitz Forums < 3.4.03 register.asp Email Parameter SQL Injection (deprecated)
Binary data 1530.prm...
Snitz Forums 2000 < 3.4.03 register.asp Email Parameter SQL Injection
The remote host is using Snitz Forum 2000. This version allows an attacker to execute stored procedures and non-interactive operating system commands on the system. The problem stems from the fact that the 'Email' variable in the register.asp module fails to properly validate and strip out...
PT-2003-2139 · Phpkit · Phpkit
Name of the Vulnerable Software and Affected Versions: PHPKIT versions 1.6.02 through 1.6.03 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the contact email parameter in the include.php file. Recommendations: For PHPKIT versions...
CVE-2003-0751
SQL injection vulnerability in passdone.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the email parameter...
CVE-2003-0751: Undefined Security Weakness
SQL injection vulnerability in passdone.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the email parameter...
Snitz Forums 2000 register.asp Email Parameter SQL Injection
The remote version of Snitz Forums 2000 is vulnerable to a SQL injection attack. The 'Email' parameter of 'register.asp' is not sanitized before being used in a SQL query. A remote attacker could exploit this to execute arbitrary SQL queries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2003-0038
Removed by vendor...
PT-2003-1325
Name of the Vulnerable Software and Affected Versions Mailman version 2.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject script or HTML into web pages via the email or language parameters. Recommendations For Mailman version 2.1, update the options.py fil...