CVE-2004-2688

CVE-2004-2688 / CVE-2006-3358 describe multiple XSS vulnerabilities in NewsPHP’s index.php. The issue is triggered by unsanitized user input through the cat_id parameter (and other vectors in related CVEs), which can cause arbitrary web script/HTML to be injected and reflected in error pages. The...

CVE-2004-2688

Cross-site scripting XSS vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the catid parameter. NOTE: this issue might overlap vector 3 in CVE-2006-3358...

CVE-2004-2688: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the catid parameter. NOTE: this issue might overlap vector 3 in CVE-2006-3358...

CVE-2007-5235

The CVE-2007-5235 entry describes a Cross-site Scripting (XSS) vulnerability in Uebimiau, specifically in index.php for versions 2.7.2 through 2.7.10. The issue allows remote attackers to inject arbitrary web script or HTML via the f_email parameter. The provided documents do not include explicit...

CVE-2007-5235: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to inject arbitrary web script or HTML via the femail parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5233

Affected product: Web Templates Management (1.3) — index.php SQL Injection vulnerability. Root cause: inadequate sanitization of user-supplied data before constructing SQL queries. Impact (as stated): attacker could compromise the application and access or modify data via the SQL injection vector...

CVE-2007-5233: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Web Template Management System 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a readmore action...

CVE-2007-5218: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Don Barnes DRBGuestbook 1.1.13 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2007-5222: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MAXdev MDPro MD-Pro 1.0.76 allows remote attackers to execute arbitrary SQL commands via a "Firefox ID=" substring in a Referer HTTP header...

DRBGuestbook Remote XSS Vulnerability

Oo Title: DRBGuestbook Remote XSS Vulnerability Download: http://www.hotscripts.com/jump.php?listingid=67702&jumptype=1 Author: Gokhan Contact: [email protected] | KAF KAF KAF SIN SIN SIN KAFSIN KAFSIN KAF Vuln Code: index.php XSS:...

Sql injection

SQL injection vulnerability in index.php in the MambAds commambads 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid parameter...

CVE-2007-5177

CVE-2007-5177 describes an SQL injection in the MambAds (com_mambads) component for Mambo, affected in version 1.5 and earlier. The vulnerability is triggered via the caid parameter in index.php, allowing remote attackers to manipulate SQL commands. The connected documents also corroborate relate...

drbguestbook-xss.txt

Oo Title: DRBGuestbook Remote XSS Vulnerability Download: http://www.hotscripts.com/jump.php?listingid=67702&jumptype=1 Author: Gokhan Contact: [email protected] | KAF KAF KAF SIN SIN SIN KAFSIN KAFSIN KAF Vuln Code: index.php XSS: http://site/guestbook/index.php?action=alert"XSS"; Tum islam...

CVE-2007-5186: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when registerglobals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter, a different vector than CVE-2006-5497. NOTE: this issue was disputed, but the dispute...

CVE-2007-5177: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the MambAds commambads 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid parameter...

Segue CMS 1.8.4 - 'index.php' Remote File Inclusion

?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...

mambads-sql.txt

Mambads = 1.5 Sql Injection Autor:Sniper456 Contact:Sniper456atgmail.kom Greetss: PescaoDeth, Daemon21, Vampirin456, Shh-2, CodeBreak and the chilean People ; SQL: index.php?option=commambads&Itemid=0&func=detail&cacat=1&casb=1&caid=inyecta maricon Example:...

Mambo Component Mambads <= 1.5 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Mambo Component Mambads = 1.5 Remote SQL Injection Vulnerability ================================================================= Mambads = 1.5 Sql Injection Autor:Sniper45...

MD-Pro 1.0.76 - SQL Injection

!/usr/bin/perl use strict; use IO::Socket; my $app = "MDPro 1.0.76"; my $type = "SQL Injection"; my $author = "undefined1"; my $settings = "magicquotesruntime = off, mysql = 4.1.0"; $| = 1; print ":: $app $type - by $author ::\n\n\n"; my $url = shift || usage; if$url = m/^?:http://./ $url = $1;...

MD-Pro 1.0.76 - index.php Firefox ID SQL Injection

MD-Pro 1.0.76 - index.php Firefox ID SQL Injection source: https://www.securityfocus.com/bid/25864/info MD-Pro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...