26 matches found
CVE-2005-4054: Undefined Security Weakness
SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 categoryid, 2 entryid, 3 year, 4 month, and 5 day parameter...
CVE-2005-3516
Cross-site scripting XSS vulnerability in recommend.php in Chipmunk Directory script allows remote attackers to inject arbitrary web script or HTML via the entryID parameter...
CVE-2005-3516
Cross-site scripting XSS vulnerability in recommend.php in Chipmunk Directory script allows remote attackers to inject arbitrary web script or HTML via the entryID parameter...
CVE-2005-3516: Undefined Security Weakness
Cross-site scripting XSS vulnerability in recommend.php in Chipmunk Directory script allows remote attackers to inject arbitrary web script or HTML via the entryID parameter...
CVE-2005-1494: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in admin.cgi in MegaBook 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 entryid or 2 password parameter...
CVE-2005-0368: Undefined Security Weakness
Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the 1 EntryID or 2 searchterm parameter to index.php, or 3 username parameter to authenticate.php...