CVE-2008-6246: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in category.php in Scripts For Sites SFS EZ Webring allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6247: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in topsite.php in Scripts For Sites SFS EZ Top Sites allows remote attackers to execute arbitrary SQL commands via the ts parameter...

CVE-2008-6242: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SearchResults.php in Scripts For Sites SFS EZ e-store allows remote attackers to execute arbitrary SQL commands via the where parameter...

CVE-2008-6244: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewreviews.php in Scripts for Sites SFS EZ Gaming Cheats allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6245: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in track.php in Scripts For Sites SFS EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in password.php in Scripts For Sites SFS EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-0533

Cross-site scripting XSS vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-0533

CVE-2009-0533 describes a Cross-site scripting (XSS) vulnerability in password.php of Scripts for Sites EZ Reminder, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors (possibly involving the u2 parameter). NVD/SEC data assign a CVSS v2 base score of 4.3 (Medium) wi...

CVE-2009-0532

Cross-site scripting XSS vulnerability in password.php in Scripts For Sites SFS EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-0533

Cross-site scripting XSS vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-0532

CVE-2009-0532 describes a Cross-Site Scripting (XSS) flaw in password.php of Scripts For Sites (SFS) EZ Baby. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially involving the u2 parameter. The NVD entry lists a base score of 4.3 (...

Directory traversal

Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. dot dot in the id parameter in a detail action to 1 main.php and 2 template.php in ringtones/...

CVE-2008-6112

Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. dot dot in the id parameter in a detail action to 1 main.php and 2 template.php in ringtones/...

CVE-2008-6112

Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. dot dot in the id parameter in a detail action to 1 main.php and 2 template.php in ringtones/...

CVE-2008-6112

CVE-2008-6112 : In Ez Ringtone Manager, multiple directory traversal vulnerabilities allow remote attackers to read arbitrary files via a “..” in the id parameter of the detail action to (1) main.php and (2) template.php under ringtones/. The NVD entry assigns a base score of 5.0 (Medium) with ne...

CVE-2009-0533: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in password.php in Scripts for Sites EZ Reminder allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-6112: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. dot dot in the id parameter in a detail action to 1 main.php and 2 template.php in ringtones/...

CVE-2009-0532: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in password.php in Scripts For Sites SFS EZ Baby allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the u2 parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

EZ Publish 3.9.53.10.14.0.1 - token Privilege Escalation

EZ Publish 3.9.53.10.14.0.1 - token Privilege Escalation = 3.5.6 eZ Publish privilege escalation resolved in 3.9.5, 3.10.1, 4.0.1 More info: http://ez.no/developer/security/securityadvisories/ezpublish39/ezsa2008003insufficientformhandlingmadeprivilegeescalationpossible eZ Publish weak activation...

eZ Publish < 3.9.5/3.10.1/4.0.1 (token) Privilege Escalation Exploit

No description provided by source. ?php / eZ Publish privilege escalation and weak activation token for new user exploit by s4avrd0w [email protected] Versions affected = 3.5.6 eZ Publish privilege escalation resolved in 3.9.5, 3.10.1, 4.0.1 More info:...