CVE-2005-3161: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via 1 the activate parameter in register.php and 2 the catid parameter in faq.php...

CVE-2005-1803

Multiple cross-site scripting XSS vulnerabilities in Net Portal Dynamic System NPDS 5.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to 1 admin.php, or 2 powerpackf.php, 3 the sitename parameter to sdvinfos.php, 4 the categories parameter to faq.php, 5...

CVE-2005-1803

CVE-2005-1803 affects Net Portal Dynamic System (NPDS) 5.0. The description lists multiple XSS vectors: via the language parameter to admin.php or powerpack_f.php; the sitename parameter to sdv_infos.php; the categories parameter to faq.php; the lettre parameter to the glossaire module; the title...

CVE-2005-1803: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Net Portal Dynamic System NPDS 5.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to 1 admin.php, or 2 powerpackf.php, 3 the sitename parameter to sdvinfos.php, 4 the categories parameter to faq.php, 5...

CVE-2005-1075

Multiple cross-site scripting XSS vulnerabilities in RadScripts RadBids Gold 2 allow remote attackers to inject arbitrary web script or HTML via 1 the farea parameter to faq.php or the 2 cat, 3 order, or 4 area parameters to index.php...

PHPWind Board faq.php skin Parameter Remote File Inclusion

The remote host is running PHPWind Board, a web-based bulletin board. There is a flaw in older versions of this software in the file 'faq.php' that could allow an attacker to gain a shell on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

PHPWind Board < 2.0.2 faq.php Remote File Inclusion (deprecated)

Binary data 2513.prm...

CVE-2004-0729: Undefined Security Weakness

PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid 1 categoryrows parameter to index.php, 2 faq parameter to faq.php, or 3 ranksrow parameter to profile.php, which reveal the full path in an error message...

CVE-2003-0874

CVE-2003-0874 affects DeskPRO 1.1.0 and earlier. The vulnerability arises from multiple SQL injection vectors, including cat and article parameters in faq.php, tickedid in view.php, and the Password field on the logon screen. The underlying issue is improper input handling that allows an attacker...

CVE-2003-0874: Undefined Security Weakness

Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to insert arbitrary SQL and conduct unauthorized activities via 1 the cat parameter in faq.php, 2 the article parameter in faq.php, 3 the tickedid parameter in view.php, and 4 the Password entry on the logo...