CVE-2008-6190

The CVE-2008-6190 entry relates to a Cross-site Scripting (XSS) vulnerability in EEBCMS 0.95, where an attacker can supply the content parameter to index.php to inject arbitrary web script or HTML. This affects EEBCMS 0.95 and allows remote exploitation via the vulnerable parameter, enabling part...

CVE-2008-6174

Cross-site scripting XSS vulnerability in admin/postlister/index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the liste parameter...

CVE-2008-6174

CVE-2008-6174 is an XSS vulnerability affecting Jetbox CMS 2.1, specifically in admin/postlister/index.php where the liste parameter can be exploited to inject arbitrary web script or HTML. The descriptions across NVD and related records confirm a cross-site scripting flaw without details on obse...

CVE-2009-0639

CVE-2009-0639 is a PHP remote file inclusion vulnerability affecting phpyabs 0.1.2, specifically in moduli/libri/index.php. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the Azione parameter. Public references (e.g., SecurityFocus BID 33670, Exploit-DB 8005)...

CVE-2009-0604

SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the searching parameter...

Sql injection

SQL injection vulnerability in index.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the searching parameter...

CVE-2009-0604

CVE-2009-0604 affects PHP Director 0.21 and earlier. The vulnerability is a SQL injection in index.php triggered via the searching parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation and affected version details are supported by multiple sources (NVD, CVE listings...

Sql injection

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6155

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6155

SQL injection vulnerability in index.php of Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. Affected software is Hispah Text Links Ads 1.1; root cause is improper handling of the idtl parameter leading to SQL injection. C...

CVE-2008-6154

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idcat parameter...

CVE-2009-0598

CVE-2009-0598 affects PhpMesFilms (versions 1.0 and 1.8). The vulnerability is an SQL injection in index.php via the id parameter, allowing remote attackers to execute arbitrary SQL. Underlying cause: unsafe handling of the id input. Impact is partial confidentiality/integrity/availability with C...

CVE-2009-0594

CVE-2009-0594 affects phpSkelSite 1.4 in the file index.php, where a cross-site scripting (XSS) vulnerability exists that allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. This is the underlying cause noted in the description. The supplied documents do not specify ...

CVE-2009-0597

CVE-2009-0597 describes an SQL injection in the w3b>cms (aka w3blabor CMS) admin/index.php before version 3.4.0, exploitable when magic_quotes_gpc is disabled. A remote attacker can inject SQL via the benutzername (Username) field in the login action, potentially executing arbitrary SQL comman...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 action and 2 page parameters...

CVE-2008-6130

Cross-site scripting XSS vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 action and 2 page parameters...

CVE-2008-6127

Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...

CVE-2008-6127

CVE-2008-6127 affects moziloCMS

CVE-2008-6130

The CVE-2008-6130 entry identifies a cross-site scripting (XSS) vulnerability in moziloWiki 1.0.1 and earlier, exploitable via index.php. The root cause is unsanitized input in the (1) action and (2) page parameters, enabling remote attackers to inject arbitrary web script or HTML. Affected softw...