7218 matches found
CVE-2009-2574
index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action...
CVE-2009-2574
index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action...
CVE-2009-2569
Multiple cross-site scripting XSS vulnerabilities in Verlihub Control Panel VHCP 1.7e allow remote attackers to inject arbitrary web script or HTML via 1 the nick parameter in a login action to index.php or 2 the URI in a news request to index.html...
CVE-2009-2574
CVE-2009-2574 affects MiniTwitter 0.2 beta. The flaw in index.php lets remote authenticated users modify certain options of arbitrary accounts via an opt action. Exploitation is documented (Exploit-DB) and related references link to insecure parameter handling; CVSS from NVD indicates a medium ri...
dB Masters MultiMedias Content Manager 4.5 - SQL Injection
dB Masters MultiMedias Content Manager 4.5 - SQL Injection =========================================================================================== o dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability Software : dB Masters Multimedia's Content Manager version 4.5 Vendor :...
dB Masters MultiMedia's Content Manager 4.5 - SQL Injection
=========================================================================================== o dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability Software : dB Masters Multimedia's Content Manager version 4.5 Vendor : http://www.dbmasters.net/ Author : NoGe Contact :...
dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability
No description provided by source. =========================================================================================== o dB Masters Multimedia's Content Manager 4.5 SQL Injection Vulnerability Software : dB Masters Multimedia's Content Manager version 4.5 Vendor : http://www.dbmasters.net...
CVE-2009-2451
Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters in a calendar action, or 3 a search term in the search form...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in JNM Guestbook 3.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2009-2438
Cross-site scripting XSS vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-1399...
CVE-2009-2438
CVE-2009-2438 describes a cross-site scripting (XSS) vulnerability in ClanSphere, affecting versions 2009.0 and 2009.0.2. The flaw allows remote injection of arbitrary script/HTML via the text parameter in a list action within the search module (index.php). The root cause is an input handling iss...
GLinks 2.1 Blind SQL Injection
0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + GLinks v2.1 Remote Blind SQL injection + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Str0ke, Neocoderz, Sheiry, Shimik Root aka...
LionWiki (index.php page) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================ LionWiki index.php page Local File Inclusion Vulnerability ============================================================ script home site :0 http://lionwiki.0o.cz/ script name :=...
Sql injection
SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a thread action, a different vector than CVE-2008-0355...
CVE-2009-2339
CVE-2009-2339 describes an SQL injection in index.php of Rentventory, exploitable remotely via the product parameter. Root cause: improper input handling allows arbitrary SQL execution. Impact (per CVSS v2): partial confidentiality, integrity, and availability with a base score of 7.5 (NETWORK at...
CVE-2009-2340
CVE-2009-2340 affects Opial 1.0: the admin/index.php module is vulnerable to SQL injection via the txtUserName (User Name) parameter, enabling remote execution of arbitrary SQL commands. Some sources also mention txtPassword and other parameters, but the core detail is the improper input filterin...
CVE-2009-2339
SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via the product parameter...
CVE-2008-6848
CVE-2008-6848 affects phpGreetCards 3.7, specifically the code path in index.php. The vulnerability is an XSS via the category parameter in a select action, allowing remote attackers to inject arbitrary web script or HTML. The connected documents confirm the affected component and the underlying ...