7576 matches found
CVE-2006-2290
Multiple cross-site scripting XSS vulnerabilities in kommentar.php in 2005-Comments-Script allow remote attackers to inject arbitrary web script or HTML via the 1 id, 2 email, and 3 url parameter...
Sql injection
Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL commands via the ID parameter to 1 comentarii.php or 2 view.php...
CVE-2006-2243
Multiple cross-site scripting XSS vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to 1 comentarii.php or 2 view.php. NOTE: this issue might be resultant from SQL injection...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to 1 comentarii.php or 2 view.php. NOTE: this issue might be resultant from SQL injection...
Sql injection
SQL injection vulnerability in news.php in AZNEWS allows remote attackers to execute arbitrary SQL commands via the ID parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the 1 referral parameter to signup.php or 2 id parameter to members.php...
CVE-2006-2136
SQL injection vulnerability in news.php in AZNEWS allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2006-2140
Multiple cross-site scripting XSS vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the 1 referral parameter to signup.php or 2 id parameter to members.php...
CVE-2006-2145
Multiple SQL injection vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 topic or 2 id parameter...
Sql injection
SQL injection vulnerability in portfoliophotopopup.php in Verosky Media Instant Photo Gallery 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, which is not cleansed before calling the countclick function in includes/functions/fnsstd.php. NOTE: this issue could...
CVE-2006-2080
SQL injection vulnerability in portfoliophotopopup.php in Verosky Media Instant Photo Gallery 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, which is not cleansed before calling the countclick function in includes/functions/fnsstd.php. NOTE: this issue could...
CVE-2006-2080
CVE-2006-2080 affects Verosky Media Instant Photo Gallery 1.0.2. The vulnerability is an SQL injection in portfolio_photo_popup.php (id parameter) that is not cleansed before calling count_click in includes/functions/fns_std.php, allowing remote attackers to execute arbitrary SQL commands. The no...
CVE-2006-1964
SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-1964
SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter in addlinklwp.cgi and the 2 id, 3 forgotid, and 4 forgotpass parameters in edit.cgi...
CVE-2006-1893
Cross-site scripting XSS vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2006-1893
Cross-site scripting XSS vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter...