166 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 module, or 3 section parameter...
CVE-2007-2470
Multiple cross-site scripting XSS vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 module, or 3 section parameter...
CVE-2007-2469
CVE-2007-2469 is a SQL injection vulnerability in FileRun versions 1.0 and earlier. The issue arises in index.php via the fid parameter, allowing remote attackers to execute arbitrary SQL commands. The connected documents corroborate the description across multiple sources (NVD, CVE List, PRION, ...
CVE-2007-2470
CVE-2007-2470 describes multiple cross-site scripting (XSS) vulnerabilities in index.php of FileRun before or at version 1.0, enabling remote attackers to inject arbitrary script or HTML via the (1) page, (2) module, or (3) section parameters. The available connected sources confirm the affected ...
CVE-2007-2469
SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the fid parameter...
CVE-2007-2470
Multiple cross-site scripting XSS vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 module, or 3 section parameter...