7241 matches found
CVE-2006-1909
The CVE-2006-1909 vulnerability affects Coppermine Photo Gallery, specifically index.php in version 1.4.4. It allows Local File Inclusion/Directory Traversal through the file parameter using patterns like .//./, collapsing to ../ and enabling reading arbitrary local files and potentially executin...
CVE-2006-1918
CVE-2006-1918 affects Papoo 2.1.5. The vulnerability is multiple cross-site scripting (XSS) flaws exploitable via the menuid parameter in index.php or forum.php, and the reporeid_print parameter in print.php. The root cause is improper sanitization of input leading to script/HTML injection. Docum...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2006-1904
CVE-2006-1904 is a cross-site scripting (XSS) vulnerability reported in the AnimeGenesis Gallery project, affecting the file index.php. The issue allows remote attackers to inject arbitrary web script or HTML by manipulating the cat parameter. Public references include NVD entry with the XSS desc...
CVE-2006-1878
Cross-site scripting XSS vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML via the page parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be resultant from the directory traversal vulnerability...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the twgalbum parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in phpLinks 2.1.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter...
Directory traversal
Directory traversal vulnerability in index.php in phpWebFTP 3.2 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the language parameter...
CVE-2006-1809
index.php in Lifetype 1.0.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which reveals the path in an error message...
CVE-2006-1807
Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start parameter in a search action or 2 type parameter in a top action...
CVE-2006-1806
CVE-2006-1806 describes a cross-site scripting (XSS) vulnerability in Musicbox 2.3.3 and earlier. The issue is triggered via the term parameter in a search action within index.php, allowing remote attackers to inject arbitrary web script or HTML. The NVD entry for this CVE confirms the vulnerable...
CVE-2006-1807
Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start parameter in a search action or 2 type parameter in a top action...
CVE-2006-1825
Cross-site scripting XSS vulnerability in index.php in phpLinks 2.1.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter...
CVE-2006-1809
index.php in Lifetype 1.0.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which reveals the path in an error message...
CVE-2006-1807
CVE-2006-1807 affects MusicBox (older releases) where the PHP file index.php is vulnerable to SQL injection. The vulnerability allows remote attackers to inject arbitrary SQL via the (1) start parameter in a search action or (2) type parameter in a top action, in MusicBox 2.3.3 and earlier. Conne...
CVE-2006-1802
The CVE-2006-1802 issue affects TinyWebGallery 1.3 and 1.4, with a Cross-Site Scripting (XSS) flaw in index.php via the twg_album parameter. Remote attackers could inject arbitrary script/HTML. Root cause: unsanitized input in the twg_album parameter. No explicit remediation details are provided ...
CVE-2006-1808
The CVE-2006-1808 entry describes a Cross-site Scripting (XSS) vulnerability in Lifetype 1.0.3, exploitable via the show parameter in a Template operation of index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Affected product: Lifetype 1.0.3. Root cause/s...
phpwebftp -- "language" Local File Inclusion
Secunia reports: phpWebFTP have a vulnerability, which can be exploited by malicious people to disclose sensitive information. Input passed to the "language" parameter in index.php isn't properly verified, before it is used to include files. This can be exploited to include arbitrary files from...
