7216 matches found
CVE-2008-2264
Cross-site scripting XSS vulnerability in index.php in CyrixMED 1.4 allows remote attackers to inject arbitrary web script or HTML via the msgerreur parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-2280
CVE-2008-2280 describes a cross-site scripting (XSS) vulnerability in admin/index.php of Script PHP PicEngine 1.0. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the l parameter. The description notes the information provenance as third-party. The provided do...
CVE-2008-2264
The CVE-2008-2264 entry concerns an XSS vulnerability in CyrixMED 1.4, triggered in index.php via the msg_erreur parameter. Affected component: index.php function handling user-supplied input. Underlying cause is a lack of proper input sanitization sufficient to prevent HTML/script injection. Imp...
CVE-2008-2264
Cross-site scripting XSS vulnerability in index.php in CyrixMED 1.4 allows remote attackers to inject arbitrary web script or HTML via the msgerreur parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
sunshop-blindsql.txt
!/usr/bin/perl -w use LWP::UserAgent; scripts : SunShop Version 3.5.1 Remote Blind Sql Injection scripts site : http://www.turnkeywebtools.com/sunshop/ Discovered By : irvian site : http://irvian.cn email : [email protected] print "\r\n+-----------------------------------------+\r\n"; print...
CVE-2008-2225
SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands via the systemId parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 keywords parameter to upload/admin/index.php in a search action, the 2 msgcharset and 3 msgheader9 parameters to admin/inc/header.php, and the 4 keywords...
Sql injection
SQL injection vulnerability in index.php in Maian Music 1.1 allows remote attackers to execute arbitrary SQL commands via the album parameter in an album action...
Sql injection
SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter to index.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Maian Cart 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 msgadminheader, 2 msgadminheader2, 3 msgadminheader3, 4 msgadminheader4, and unspecified other parameters to admin/inc/header.php; the 5 msgscript3 and...
CVE-2008-2208
SQL injection vulnerability in index.php in Maian Greeting 2.1 allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a search action...
CVE-2008-2207
The CVE-2008-2207 entry covers a Cross-site Scripting (XSS) vulnerability in Maian Gallery 2.0, specifically in admin/index.php where the keywords parameter of a search action can be exploited to inject arbitrary script/HTML by an unauthenticated remote attacker. The affected component is Maian G...
CVE-2008-2205
CVE-2008-2205 describes an SQL injection in Maian Music 1.1: the vulnerable component is index.php handling the album action, where the album parameter is exploitable. The underlying cause is unsanitized user input that is used to compose SQL queries, enabling remote attackers to execute arbitrar...
Sql injection
Multiple SQL injection vulnerabilities in SMartBlog aka SMBlog 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 mois, 2 an, 3 jour, and 4 id parameters to index.php, and the 5 login parameter to gestion/logon.php, different vectors than CVE-2008-2183. NOTE: the provenance of...
CVE-2008-2183
SQL injection vulnerability in index.php in SMartBlog aka SMBlog 1.3 allows remote attackers to execute arbitrary SQL commands via the idt parameter...
CVE-2008-2185
The CVE-2008-2185 entry describes a directory traversal vulnerability in SMartBlog (aka SMBlog) 1.3. The vulnerability is in index.php and allows remote attackers to include arbitrary local files through directory traversal sequences supplied in the page parameter. This leads to potential exposur...
CVE-2008-2183
SQL injection vulnerability in index.php in SMartBlog aka SMBlog 1.3 allows remote attackers to execute arbitrary SQL commands via the idt parameter...
CVE-2008-2184
Multiple SQL injection vulnerabilities in SMartBlog aka SMBlog 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 mois, 2 an, 3 jour, and 4 id parameters to index.php, and the 5 login parameter to gestion/logon.php, different vectors than CVE-2008-2183. NOTE: the provenance of...
AJ Classifieds 2008 - index.php SQL Injection
AJ Classifieds 2008 - index.php SQL Injection --==+================================================================================+==-- --==+ AJ Classifieds 2008 index.php Remote SQL Injection Vulnerability +==--...