CVE-2008-4082

SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via an arbitrary field in a search action to index.php...

Sql injection

SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...

Cross site scripting

Cross-site scripting XSS vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-4086

SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...

CVE-2008-4086

The vulnerability CVE-2008-4086 affects Reciprocal Links Manager 1.1. Affected component: index.php. Issue: SQL injection via the site parameter in an open action, enabling remote attackers to execute arbitrary SQL commands. According to the sources, the CVSS v2 base score is 7.5 (HIGH) with netw...

CVE-2008-4091

CVE-2008-4091 describes an SQL injection vulnerability in the web directory script’s index.php (version 1.5.3). The issue allows remote attackers to inject arbitrary SQL via the site parameter in an open action, enabling potentially unauthorized database queries. The available documents confirm t...

CVE-2008-4083

Cross-site scripting XSS vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-4083

The CVE-2008-4083 entry documents a Cross-site Scripting (XSS) vulnerability in the Bookmarks plugin for Brim 2.0. The issue arises when an authenticated user adds an item via index.php, with the name parameter not properly sanitized, allowing arbitrary web script or HTML to be injected. Affected...

CVE-2008-4072

CVE-2008-4072 affects phsBlog 0.2 via SQL injection in index.php, exploitable through the sid parameter (pickup action) or the sql_cid parameter. The root cause, as stated, is unsafe SQL construction allowing remote attackers to insert arbitrary SQL. The connected documents do not provide concret...

CVE-2008-4073

SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a DBpAGE action...

CVE-2008-4075

Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files via a .. dot dot in the topic parameter...

CVE-2008-4073

CVE-2008-4073: A SQL injection vulnerability is present in Zanfi Autodealers CMS AutOnline, exploitable via the pageid parameter in a DBpAGE action. Affected component is index.php; the vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD entry lists a base score of 7....

CVE-2008-4074: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

CVE-2008-4091: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...

CVE-2008-4072: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to execute arbitrary SQL commands via 1 the sid parameter in a pickup action or 2 the sqlcid parameter, different vectors than CVE-2008-3588...

CVE-2008-4073: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a DBpAGE action...

CVE-2008-4075: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files via a .. dot dot in the topic parameter...

CVE-2008-4082: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via an arbitrary field in a search action to index.php...

CVE-2008-4083: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2008-4086: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...