CVE-2008-3344: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a allow remote attackers to inject arbitrary web script or HTML via the 1 ResultHtml, 2 dir, 3 SenderName, 4 RecipientName, 5 SenderMail, and 6 RecipientMail...

CVE-2008-3348: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to inject arbitrary web script or HTML via the year parameter...

CVE-2008-3345: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a pickup action...

CVE-2008-3352: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Live Music Plus 1.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a Singer action...

CVE-2008-3347: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to execute arbitrary SQL commands via the read parameter...

CVE-2008-3343: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr trial edition allows remote attackers to execute arbitrary SQL commands via the read parameter in a search action...

CVE-2008-3342: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edpNews action...

CVE-2008-3330

Cross-site scripting XSS vulnerability in services/obrowser/index.php in Horde 3.2 and Turba 2.2 allows remote attackers to inject arbitrary web script or HTML via the contact name...

CVE-2008-3330: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in services/obrowser/index.php in Horde 3.2 and Turba 2.2 allows remote attackers to inject arbitrary web script or HTML via the contact name...

SiteAdmin CMS - 'art' SQL Injection

SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com Cr@zyKing / sqL Lov3r'Z Crew Co. http://localhost/line2.php?lng=ru&art=16+limit+0+union+select+1,2,concatws0x3a3a,userlogin,userpassw,4,5,6,7+from+authusers+limit+3,10/&cat=2 Admin Panel :...

CVE-2008-3322

admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipecookie cookie...

CVE-2008-3321: Improper Authentication

admin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary uploadercookie cookie...

CVE-2008-3322: Improper Authentication

admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipecookie cookie...

CVE-2008-3319: Improper Authentication

admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary linkscookie cookie...

CVE-2008-3320: Improper Authentication

admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary gbookcookie cookie...

CVE-2008-3318: Improper Authentication

admin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary weblogcookie cookie...

CVE-2008-3317: Improper Authentication

admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary searchcookie cookie...

CVE-2008-3291

SQL injection vulnerability in index.php in AproxEngine aka Aprox CMS Engine 5.1.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3291

SQL injection vulnerability in index.php in AproxEngine aka Aprox CMS Engine 5.1.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3291: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in AproxEngine aka Aprox CMS Engine 5.1.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...