13686 matches found
PT-2012-6184
Name of the Vulnerable Software and Affected Versions Simple Machines Forum version 2.0.2 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the scheduled parameter to the "index.php" endpoint. Recommendations...
CVE-2012-4532
Cross-site scripting XSS vulnerability in modules/modlanguages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php. NOTE: some of these details are obtained from third party...
PT-2012-5464
Name of the Vulnerable Software and Affected Versions Joomla! versions 2.5.x through 2.5.6 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the PATH INFO to index.php. Recommendations For versio...
CVE-2012-4532: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in modules/modlanguages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php. NOTE: some of these details are obtained from third party...
One Page Directory Multiple SQL/RFI Vulnerabilities
Exploit for php platform in category web applications / @exploit One Page Directory Multiple SQL/RFI Vulnerabilities @script EN-Title One Page Directory @script AR-Title برنامج وصلة @virsion 2.0 @author Cold Zero www.hackteach.org @copyright 25/10/2012 @script...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 modules/admin/adminmoduleindex.php, or 3 modules/calendar/customisecalendartimes.php; login parameter to 4 index.ph...
Cross site scripting
Cross-site scripting XSS vulnerability in templates/default/Admin/Login.html in PHP-SCMS 1.6.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter to index.php...
Sql injection
SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2011-5220
Cross-site scripting XSS vulnerability in templates/default/Admin/Login.html in PHP-SCMS 1.6.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter to index.php...
CVE-2011-5215: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Video Community Portal allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2011-5229: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote attackers to execute arbitrary SQL commands via the PATHINFO...
PT-2012-2197
Name of the Vulnerable Software and Affected Versions PHP-SCMS versions 1.6.8 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the lang parameter to "index.php". Recommendations For PHP-SCMS versions 1.6.8 and...
CVE-2011-5213: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 loginusername parameter to index.php, 2 parentid parameter to modules/Documents/versionlist.php, or 3 contactid parameter to modules/Documents/index.php...
CVE-2011-5218: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in DotA OpenStats 1.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
PT-2012-2195
Name of the Vulnerable Software and Affected Versions DotA OpenStats versions 1.3.9 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to the "index.php" endpoint. Recommendations For DotA OpenStats versions 1.3.9 and...
PT-2012-2190
Name of the Vulnerable Software and Affected Versions BrowserCRM versions 5.100.01 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the loginusername parameter to "index.php", the parent id parameter to "modules/Documents/versio...
PT-2012-2206
Name of the Vulnerable Software and Affected Versions appRain CMF version 0.1.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the PATH INFO in the quickstart/profile/index.php file within the Forum module. Recommendations For appRain CMF...
PT-2012-2192
Name of the Vulnerable Software and Affected Versions Video Community Portal affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the "index.php" file. This can lead to unauthorized access and manipulation of...
CVE-2011-5220: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in templates/default/Admin/Login.html in PHP-SCMS 1.6.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter to index.php...