CVE-2010-4869

SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter...

CVE-2010-4859

SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blogid parameter in a news action...

CVE-2010-4862

SQL injection vulnerability in the JExtensions JE Directory comjedirectory component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...

Sql injection

SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter...

Sql injection

SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter...

CVE-2010-4866

SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter...

CVE-2010-4862

SQL injection vulnerability in the JExtensions JE Directory comjedirectory component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php...

CVE-2010-4866

CVE-2010-4866 describes a SQL injection vulnerability in Chipmunk Board 1.3, specifically in index.php, allowing remote attackers to execute arbitrary SQL commands via the forumID parameter. The reports indicate a remote exploit path with a base score of 7.5 (HIGH) under CVSS v2, but the provided...

CVE-2010-4869

CVE-2010-4869 targets DBHcms 1.1.4, where a SQL injection flaw in index.php allows remote attackers to inject arbitrary SQL via the editmenu parameter. The CVSS2 base score is 7.5 (HIGH) with network attack vector, no authentication, and partial impact on confidentiality, integrity, and availabil...

WordPress Black-LetterHead Theme 1.5 - Cross Site Scripting

WordPress Black-LetterHead theme's "index.php" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...

CVE-2011-3862

Cross-site scripting XSS vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2011-3865

Cross-site scripting XSS vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

PT-2011-4737 · WordPress · Web Minimalist 200901 Theme

Name of the Vulnerable Software and Affected Versions: Web Minimalist 200901 theme for WordPress version 1.2 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "index.php". Recommendations: For Web Minimali...

CVE-2010-4851

Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the 1 ref or 2 pollid parameter to index.php, or the 3 country parameter to createaccount.php...

Sql injection

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...

CVE-2010-4845

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...

700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot !

700,000 sites on Inmotion Hosting Server hacked by TiGER-M@TE in one shot ! 700,000 websites hosted on InMotion Hosting network hacked by TiGER-M@TE includingTrinity FM, Blast Magazine. It was not just a server hack, actually whole data center got hacked. List of all hacked 700000 sites are...

Information disclosure

Yamamah 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/index.php and certain other files...