62 matches found
CVE-2007-6128
SQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to execute arbitrary SQL commands via the idevent parameter...
CVE-2007-6128: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to execute arbitrary SQL commands via the idevent parameter...
WorkingOnWeb 2.0.1400 - events.php SQL Injection
WorkingOnWeb 2.0.1400 - events.php SQL Injection WorkingOnWeb 2.0.1400 Remote SQL Injection d0rk: Powered by WorkingOnWeb 2.0.1400 bug found by ka0x - D.O.M TEAM contact: ka0x01!gmail.com we: ka0x, an0de, xarnuz, s0cratex, Hendrix from spain 1: vulnerability in line 4. user and password from...
Design/Logic Flaw
SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain linkdate parameter to events.php, which reveals the path in an error message due to an unsupported argument type for the mktime function on Windows...
CVE-2007-5128
SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain linkdate parameter to events.php, which reveals the path in an error message due to an unsupported argument type for the mktime function on Windows...
CVE-2007-5128: Improper Input Validation
SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain linkdate parameter to events.php, which reveals the path in an error message due to an unsupported argument type for the mktime function on Windows...
CVE-2007-1128
CVE-2007-1128 affects shopkitplus. The issue is an information disclosure where requests to (1) events.php with curmonth[]=01 or (2) enc/stylecss.php with changetheme[]= reveal the installation path in error messages. The affected component is PHP-based endpoints; root cause is improper handling ...
CVE-2007-1128
shopkitplus allows remote attackers to obtain sensitive information via a request to 1 events.php with a curmonth=01 query string or 2 enc/stylecss.php with a changetheme= query string, which reveals the path in various error messages...
CVE-2007-1128: Undefined Security Weakness
shopkitplus allows remote attackers to obtain sensitive information via a request to 1 events.php with a curmonth=01 query string or 2 enc/stylecss.php with a changetheme= query string, which reveals the path in various error messages...
shopkitplus local file include
lfi: /shopkitplus/enc/stylecss.php?changetheme=../../../../../../../../../../../../etc/passwd full path: /shopkitplus/events.php?curmonth=01 /shopkitplus/enc/stylecss.php?changetheme= regards laurent gaffie...
CVE-2005-4821
Multiple SQL injection vulnerabilities in Land Down Under LDU v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including 1 the m parameter in auth.php, 2 the f parameter in events.php, or 3 the e parameter in plug.php...
CVE-2005-4821: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Land Down Under LDU v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including 1 the m parameter in auth.php, 2 the f parameter in events.php, or 3 the e parameter in plug.php...
Pie Cart Pro - Inc_Dir Remote File Inclusion
Pie Cart Pro - IncDir Remote File Inclusion ==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA...
Sql injection
SQL injection vulnerability in events.php in Maian Events 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...
CVE-2006-1341
SQL injection vulnerability in events.php in Maian Events 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...
CVE-2006-1341: Undefined Security Weakness
SQL injection vulnerability in events.php in Maian Events 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...
CVE-2005-2884
Cross-site scripting XSS vulnerability in events.php in Land Down Under LDU 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event...
CVE-2005-2884
The connected sources show concrete details for CVE-2005-2884 related to Land Down Under (LDU) <= 801. The vulnerability includes Cross-Site Scripting (XSS) in events.php and, per OpenVAS, multiple issues (including SQL injection) due to inadequate input sanitization in PHP scripts (events.php...
CVE-2005-2884: Undefined Security Weakness
Cross-site scripting XSS vulnerability in events.php in Land Down Under LDU 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event...
