8824 matches found
CVE-2006-2697
Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 startletter parameter in userview.asp and the 2 forumname parameter in topics.asp...
CVE-2006-2697
CVE-2006-2697 concerns SQL injection vulnerabilities in Easy-Content Forums 1.0. The affected components are the web scripts and parameters: startletter in userview.asp and forumname in topics.asp, where user-supplied input can be used to alter SQL queries. This is documented in the NVD descripti...
CVE-2006-2696
CVE-2006-2696 describes Cross-site scripting (XSS) in Easy-Content Forums 1.0. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the (1) startletter parameter in userview.asp and (2) catid parameter in topics.asp. Public records indicate an impact on confidentia...
CVE-2006-2696: Undefined Security Weakness
Cross-site scripting XSS vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 startletter parameter in userview.asp and the 2 catid parameter in topics.asp...
CVE-2006-2697: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 startletter parameter in userview.asp and the 2 forumname parameter in topics.asp...
Easy-Content Forums 1.0 Multiple [SQL/XSS] Vulnerabilities
ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECTON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEXT...
Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities
Exploit for unknown platform in category web applications...
Easy-Content Forums 1.0 - Multiple SQL Injection Cross-Site Scripting Vulnerabilities
Easy-Content Forums 1.0 - Multiple SQL Injection Cross-Site Scripting Vulnerabilities ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON--------------------------------------------------------...
Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities
No description provided by source. ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEX...
Easy-Content Forums 1.0 - Multiple SQL Injection / Cross-Site Scripting Vulnerabilities
ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEXT...
PHP Easy Galerie Index.PHP Remote File Include Vulnerability
Vendor: Power-Place www.power-place.net PHP Easy Galerie 1.1 ------------------------------------------------- Author:Craziest Contact: craziestatgmaildotcom Vuln discovered by BrEakerS -------------------------------------------------- Method:An attacker can exploit this issue to include an...
CVE-2006-2526
The CVE-2006-2526 issue affects PHP Easy Galerie 1.1, via a PHP remote file inclusion in index.php where includepath can be manipulated to execute arbitrary PHP code. The NVD entry assigns a MEDIUM risk (base score 6.4) with network access and no authentication, and the impact is partial confiden...
CVE-2006-2526: Undefined Security Weakness
PHP remote file inclusion vulnerability in index.php in PHP Easy Galerie 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
CVE-2006-2226
Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argument to the PORT command...
Buffer overflow
Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER command with a long username...
CVE-2006-2225
Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, probably via a USER command with a long username...
Buffer overflow
Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argument to the PORT command...
CVE-2006-2225
CVE-2006-2225 affects XM Easy Personal FTP Server 4.3 and earlier. It describes a buffer overflow exploitable by a long USER command that allows remote code execution; multiple sources corroborate this vector (USER command) and impact. There is no explicit remediation or patch details in the prov...