790 matches found
CVE-2007-3241
Cross-site scripting XSS vulnerability in blogroll.php in the cordobo-green-park theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PHPSELF portion of a URI...
CVE-2007-3241: Undefined Security Weakness
Cross-site scripting XSS vulnerability in blogroll.php in the cordobo-green-park theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PHPSELF portion of a URI...
WordPress Cordobo Green Park Theme - XSS
Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the PHPSELF portion of a URI. Solution Update the theme...
Broiler erection of space to upload what the web server is not found-bug warning-the black bar safety net
I'm here to introduce two ultra-compactweb server. 1: a Small HTTP Server v3. 0 3 9 Operating environment: Win95/Win98/Win2000 Size: 93K, little was amazing!!!) Content Description: a compact WEB server, the footprint is very small, support CGI1. 1, SSI, AND PHP. 下载 地址...
Unfixed XSS vulnerability at www.usa-green-card.com
Security researcher cyber, has submitted on 01/04/2007 a cross-site-scripting XSS vulnerability affecting www.usa-green-card.com, which at the time of submission ranked 271872 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/04/2007. It is...
CVE-2006-1930
Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 huserid, 2 pituus, or 3 date parameters. NOTE: this issue has been disputed by the vendor, saying "those parameters mentioned ARE checked...
CVE-2006-1930
Green Minute, versions 1.0 and earlier, contains multiple SQL injection vulnerabilities in userscript.php exploitable via the huserid, pituus, or date parameters. The vendor disputes the flaw, claiming those parameters are checked with preg_match before use, and CVE analyses found only non-sensit...
CVE-2006-1930
Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 huserid, 2 pituus, or 3 date parameters. NOTE: this issue has been disputed by the vendor, saying "those parameters mentioned ARE checked...
PT-2006-2914 · Unknown · Green Minute
Name of the Vulnerable Software and Affected Versions: Green Minute versions 1.0 and earlier Description: Multiple SQL injection vulnerabilities in userscript.php allow remote attackers to execute arbitrary SQL commands via the huserid, pituus, or date parameters. The vendor has disputed this...
CVE-2006-1930: Undefined Security Weakness
Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 huserid, 2 pituus, or 3 date parameters. NOTE: this issue has been disputed by the vendor, saying "those parameters mentioned ARE checked...