7241 matches found
CVE-2006-1713
Cross-site scripting XSS vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2006-1708
SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via the showid parameter in the member page to index.php...
CVE-2006-1699
Cross-site scripting XSS vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode...
CVE-2006-1707
The CVE-2006-1707 issue affects Shopweezle 2.0, where index.php permits remote attackers to include arbitrary local files via the url parameter. This indicates a local-file inclusion-style vulnerability in the web application’s handling of the url parameter, enabling an attacker to read or includ...
Vegadns blind sql injection and cross site scripting
Author : Ph03n1X email : [email protected] site : http://kandangjamur.net/ vendor : www.vegadns.org version: 0.99 XSS ---- PoC : http://exam.com/vegadns/index.php?VDNSSessid=m42644r75o1eg4f7mb7e4rnpg7&message=3Ch13E3Cmarquee3Ealoo3C/marquee3E3C/h13E Vulnerable script is located in index.php...
Jbook Cross Site Scripting
Title : Jbook Cross Site Scripting Author: Mourad aka Psych0 Moroccan Security Team Vendor: www.jmuller.net Version: 1.3 Jbook Guestbook is a PHP/MySQL based guestbook script. Vulnerability in index.php, this issue can allow an attacker to bypass content filters and potentially carry out xss...
CVE-2006-1679
Cross-site scripting XSS vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php...
CVE-2006-1679
CVE-2006-1679 is an XSS flaw in Jupiter CMS 1.1.5. The vulnerability is in modules/online.php and is exploitable via the layout parameter to index.php, allowing remote attackers to inject arbitrary web script or HTML. No remediation or patch details are provided in the connected documents.
Papoo Multiple SQL vuln.
Papoo Multiple SQL vuln. Vuln. discovered by : r0t Date: 10 april 2006 vendor:http://www.papoo.de/ affected versions: 2.1.5 & 3 beta1 and previous Vuln. description: Papoo contains a flaw that allows a remote sql injection attacks.Inputpassed to the "getlang","reporeid" parameters in " index.php"...
Jupiter CMS 1.1.5 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17405/info Jupiter CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...
Sql injection
SQL injection vulnerability in index.php in wpBlog 0.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter...
CVE-2006-1639
SQL injection vulnerability in index.php in wpBlog 0.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter...
CVE-2006-1634
CVE-2006-1634 corresponds to a cross-site scripting (XSS) vulnerability in LucidCMS 2.0.0 RC4, exploitable via the command parameter in index.php. The XSS could allow remote attackers to inject arbitrary script/HTML. Affected product is LucidCMS 2.0.0 RC4; root cause is improper handling of user-...
CVE-2006-1622
Cross-site scripting XSS vulnerability in PHPSelect linksubmit allows remote attackers to inject arbitrary web script or HTML via 1 the description parameter to linklist.php and possibly other vectors involving 2 index.php and 3 linksubmit.php...
CVE-2006-1622
CVE-2006-1622 describes a cross-site scripting (XSS) vulnerability in PHPSelect linksubmit. The issue arises from unsanitized input, allowing remote attackers to inject arbitrary script/HTML via the description parameter to linklist.php and potentially via index.php and linksubmit.php. Affected c...
CVE-2006-1622
Cross-site scripting XSS vulnerability in PHPSelect linksubmit allows remote attackers to inject arbitrary web script or HTML via 1 the description parameter to linklist.php and possibly other vectors involving 2 index.php and 3 linksubmit.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Andy's PHP Knowledgebase aphpkb 0.57 allow remote attackers to inject arbitrary web script or HTML via the 1 keywordlist parameter to a index.php; 2 title, 3 article, 4 author, and 5 keywords parameters to b submitarticle.php; and 6 Question, 7...
CVE-2006-1438
The CVE-2006-1438 entry corresponds to multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57. The affected components are PHP pages and parameters: (a) index.php via keyword_list, (b) submit_article.php via title, article, author, keywords, and (c) submit_q...