CVE-2008-5979

CVE-2008-5979 describes a cross-site scripting (XSS) vulnerability in default.asp of Ocean12 Mailing List Manager Gold. The flaw allows remote attackers to inject arbitrary web script or HTML via the Email parameter, enabling potential session hijacking or defacement depending on the context and ...

CVE-2008-5978

Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to 1 default.asp and 2 sedit.asp...

Sql injection

SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the email parameter...

CVE-2008-5582

SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the email parameter...

CVE-2008-5582

SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the email parameter...

CVE-2008-5090

Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the pregreplace function with the eval switch...

CVE-2008-3367

Cross-site scripting XSS vulnerability in RTEpopuplink.asp in Web Wiz Rich Text Editor RTE 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in RTEpopuplink.asp in Web Wiz Rich Text Editor RTE 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2008-2484

SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the email parameter...

CVE-2008-2333

Cross-site scripting XSS vulnerability in ldaptest.cgi in Barracuda Spam Firewall BSF before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in ldaptest.cgi in Barracuda Spam Firewall BSF before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2008-2333

Cross-site scripting XSS vulnerability in ldaptest.cgi in Barracuda Spam Firewall BSF before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

Barracuda Spam Firewall cgi-bin/ldap_test.cgi email Parameter XSS

According to its firmware version, the remote Barracuda Spam Firewall device fails to filter input to the 'email' parameter of the '/cgi-bin/ldaptest.cgi' script before using it to generate dynamic content. An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary...

Vulnerability in MODx CMS

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в MODx CMS. Уязвимость в скрипте index.php в параметре email. XSS: http://site/index.php?operation=subscribe&id=39&email=3CBODY20onload=alertdocument.cookie3E Уязвима прошлогодняя версия MODx CMS и вполне возможно,...

CVE-2008-1496

Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to a membre.php, and the 2 timestamp parameter to b the details action in achat/historiquecommandes.php and c the facture action in...

CVE-2007-6646

Multiple cross-site scripting XSS vulnerabilities in LiveCart 1.0.1, and possibly other versions before 1.1.0, allow remote attackers to inject arbitrary web script or HTML via 1 the return parameter to user/remindPassword, 2 the q parameter to the category script, 3 the return parameter to the...

CVE-2007-6498

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 email and 2 loginname parameters to Hosting/Addreseller.asp, 3 the sortfield parameter to accounts/accountmanager.asp, 4 the...

CVE-2007-6498

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 email and 2 loginname parameters to Hosting/Addreseller.asp, 3 the sortfield parameter to accounts/accountmanager.asp, 4 the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via 1 the email parameter to index.php; or the command parameter to index.php in 2 the default action for the home page, 3 a currencies action, or 4 a basket action...

CVE-2007-5725

Multiple cross-site scripting XSS vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via 1 the email parameter to index.php; or the command parameter to index.php in 2 the default action for the home page, 3 a currencies action, or 4 a basket action...