130 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.6.8 allow remote attackers to inject arbitrary web code or HTML via the 1 s parameter to index.php, and the 2 q parameter to a faq.php, b member.php, c memberlist.php, d calendar.php, e search.php, f forumdisplay.php, g...
CVE-2007-4453
Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.6.8 allow remote attackers to inject arbitrary web code or HTML via the 1 s parameter to index.php, and the 2 q parameter to a faq.php, b member.php, c memberlist.php, d calendar.php, e search.php, f forumdisplay.php, g...
CVE-2007-2493
PHP remote file inclusion vulnerability in faq.php in the FAQ & RULES 2.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...
CVE-2007-2493
PHP remote file inclusion vulnerability in faq.php in the FAQ & RULES 2.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...
CVE-2007-2493
CVE-2007-2493 affects the mxBB FAQ & RULES 2.0.0 and earlier module. The vulnerability is a PHP remote file inclusion in faq.php, exploitable via a malicious URL supplied to the module_root_path parameter, which allows an attacker to execute arbitrary PHP code on the server. The NVD entry lists t...
PcP-Guestbook 3.0 (lang) Local File Inclusion Vulnerabilities
.-""""""""-. / Dj7xpl | | |, .-. .-. ,| | o/ o | |/ / | @ ^^ |IIIIII|/ @8@8|-IIIIII/-| / / @ +Iranian Are The Best In World+ Portal.......: PcP-Book 3.0 Site.........: http://www.pcp-system.at Down.........: http://www.ectona.org/download/?id=621&...
Directory traversal
Multiple directory traversal vulnerabilities in PcP-Guestbook PcP-Book 3.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to 1 index.php, 2 gb.php, or 3 faq.php...
PcP-Guestbook 3.0 (lang) Local File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================= PcP-Guestbook 3.0 lang Local File Inclusion Vulnerabilities ============================================================= .-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ ...
CVE-2006-7115
SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php...
Cross site scripting
Cross-site scripting XSS vulnerability in faq.php in DeskPRO 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the article parameter...
CVE-2007-1012
Cross-site scripting XSS vulnerability in faq.php in DeskPRO 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the article parameter...
CVE-2007-1012
Cross-site scripting XSS vulnerability in faq.php in DeskPRO 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the article parameter...
CVE-2007-1012
CVE-2007-1012 is a Cross-Site Scripting (XSS) vulnerability in DeskPRO 1.1.0, exploitable via the article parameter in faq.php. The issue stems from improper handling of user input, allowing remote attackers to inject arbitrary web script or HTML. The NVD notes a CVSSv2 base score of 4.3 (Medium)...
CVE-2007-1012: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in faq.php in DeskPRO 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the article parameter...
XSS in [deskpro.com v1.1.0 ]
hey guys .. check out this new xss i just found ;P Vulnerable : deskpro.com v1.1.0 web : http://www.deskpro.com, http://customers.qwk.net Version : v1.1.0 XSS : http://127.0.0.1/dp/faq.php?article="scriptalert'bl4ck'/script Discovered By BLacK ZeRo K.S.A [email protected] Best regards ,,...
Sql injection
SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-0676
ExoPHPDesk vulnerability CVE-2007-0676 is a SQL injection in faq.php (id parameter) affecting ExoPHPDesk 1.2.1 and earlier. The underlying issue is improper input handling that allows remote attackers to craft SQL commands via id, leading to potential data disclosure or database manipulation. Pub...
CVE-2007-0676: Undefined Security Weakness
SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
ExoPHPDesk <= 1.2.1 (faq.php) Remote SQL Injection Vulnerability
No description provided by source. Title : ExoPHPDesk = 1.2.1 faq.php Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.exoscripts.com $$ : Free Dork : Powered by ExoPHPDesk v1.2 Final. DorkEx :...
ExoPHPDesk faq.php id Parameter SQL Injection
The remote host is running Exo PHPDesk, a helpdesk application written in PHP. The version of Exo PHPDesk on the remote host fails to properly sanitize input to the 'id' parameter of the 'faq.php' script before using it in database queries. Provided PHP's 'magicquotesgpc' setting is disabled, an...