PT-2015-5980

Name of the Vulnerable Software and Affected Versions phpTrafficA versions 2.3 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header to "index.php"...

CVE-2014-9145: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in an edit action to dapur/index.php; 2 cat, 3 user, or 4 level parameter to dapur/apps/apparticle/controller/articlelist.php; or 5 email parameter in an emai...

LionWiki /index.php 任意文件下载漏洞

No description provided by source...

DamiCMS v2.2 /index.php 代码执行漏洞

No description provided by source...

Joomla index.php Multiple Parameter XSS - Ver2 (CVE-2011-2710)

A cross-site scripting vulnerability has been reported in Joomla. The vulnerability is due to the script not validating input appended to the URL or passed via the 'searchword', 'extension', 'asset', 'author' parameters upon submission to the index.php script. Successful exploitation of this...

GrapAgenda index.php page Parameter PHP Code Execution - Ver2 (CVE-2006-4610)

A code execution vulnerability has been reported in Graphiks Grapagenda. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Voodoo Chat index.php file_path Parameter PHP Code Execution - Ver2 (CVE-2006-3991)

A code execution vulnerability has been reported in Voc-project Voodoo Chat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2015-2679

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the 1 page parameter to index.php or 2 username parameter to gxadmin/login.php...

CVE-2015-2679

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the 1 page parameter to index.php or 2 username parameter to gxadmin/login.php...

CVE-2015-2680

Cross-site request forgery CSRF vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request in the users page to gxadmin/index.php...

CVE-2015-2679: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the 1 page parameter to index.php or 2 username parameter to gxadmin/login.php...

CVE-2014-9261: Improper Limitation of a Pathname to a Restricted Directory

The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which allows remote attackers to read arbitrary files via a .. dot dot in the path parameter to index.php...

CVE-2015-2677: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ocPortal before 9.0.17 allow remote authenticated users to inject arbitrary web script or HTML via the 1 title or 2 text field in the cmscalendar page to cms/index.php; unspecified fields in 3 the cmspolls page to cms/index.php or 4 a new topic...

PT-2015-5831

Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 0.0.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the page parameter to "index.php" or the username parameter to "gxadmin/login.php". Recommendations For...

PT-2015-5832

Name of the Vulnerable Software and Affected Versions MetalGenix GeniXCMS versions prior to 0.0.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request in the users pa...

CVE-2015-2680: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request in the users page to gxadmin/index.php...

PT-2015-5830

Name of the Vulnerable Software and Affected Versions GeniXCMS version prior to 0.0.2 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This is possible via the cat parameter in the categories page to...

CVE-2015-2678: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter in the categories page to gxadmin/index.php or 2 page parameter to index.php...

CVE-2015-2562: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD comecommercewd component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 searchcategoryid, 2 sortorder, or 3 filtermanufacturerids in a displayproducts action to index.php...

PT-2015-5778

Name of the Vulnerable Software and Affected Versions com ecommercewd version 1.2.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the search category id, sort order, or filter manufacturer ids in a displayproducts action to "index.php"...