CVE-2006-4960

The CVE-2006-4960 entry describes a cross-site scripting (XSS) vulnerability in Php Blue Dragon 2.9.1 and earlier, exploitable via the m parameter. The issue is reflected in an error message generated by a failed SQL query, indicating that user-supplied input can be echoed back to the browser in ...

Eskolar CMS 0.9.0.0 - 'index.php' SQL Injection

!/usr/bin/php -q -d shortopentag=on / / site: http://www.soqor.net /'; if $argc.+?/is',$page||!pregm...

Innovate Portal v2.0 Index.PHP Xss Vuln.

Xss Founded in Innovate Portal Index.php venedor : http://www.innovate-board.de Example : http://www.example.com/path/index.php?content=xss ---------------- Discoverd by meto5757...

CVE-2006-4881

Multiple cross-site scripting XSS vulnerabilities in David Bennett PHP-Post PHPp 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the replyuser parameter in a pm.php; 2 the txtjumpto parameter in b dropdown.php; the 3 txterror and 4 txttemplatenotexist parameter...

CVE-2006-4860

CVE-2006-4860 concerns Limbo (aka Lite Mambo) CMS 1.0.4.2 before 20060311, with multiple vulnerabilities in 12 PHP/HTML files (index.php, minixml.inc.php, doc.inc.php, element.inc.php, node.inc.php, treecomp.inc.php, forum.html.php, forum.php, antihack.php, content.php, initglobals.php, imanager....

Pie Cart Pro - Inc_Dir Remote File Inclusion

Pie Cart Pro - IncDir Remote File Inclusion ==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA...

CVE-2006-4834

PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter...

CVE-2006-4822

Multiple cross-site scripting XSS vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 page parameters...

CVE-2006-4822

Multiple cross-site scripting XSS vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 query or 2 page parameters...

CVE-2006-4834

PHP remote file inclusion vulnerability in index.php of phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter. Affected software: phpQuiz 0.01 (index.php, pagename parameter). Root cause: inclusion of remote file via the pagename value enabling cod...

CVE-2006-4834

PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter...

CVE-2006-4753

Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the lang parameter...

CVE-2006-4736

Multiple SQL injection vulnerabilities in index.php in CMS.R. 5.5 allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpass parameters. NOTE: some of these details are obtained from third party information...

CVE-2006-4754

Cross-site scripting XSS vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that revea...

CVE-2006-4737

Jetbox CMS contains an SQL injection in index.php via the item parameter, allowing remote injection of arbitrary web content. The description notes that the view-vector is already covered by CVE-2006-3586, indicating a related vulnerability in the same package. Root cause: unsanitized input used ...

CVE-2006-4753

Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the lang parameter...

CVE-2006-4736

Multiple SQL injection vulnerabilities in index.php in CMS.R. 5.5 allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpass parameters. NOTE: some of these details are obtained from third party information...

xhpXSS.txt

Hello,, XHP CMS v0.5.1 Vuls Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Xss index.php?errcode=alertdocument.cookie; Full path action.php?action=1&module=engine...

ppalCart.txt

+-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion + +------------------------------------------------------------------- + + Affected Software .: Software + Version .............: ppalCart 2.5 EE + Venedor ...........:...

PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities

+-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion + +------------------------------------------------------------------- + + Affected Software .: Software + Version .............: ppalCart 2.5 EE + Venedor ...........:...