8058 matches found
sNews - index.php Multiple SQL Injections
sNews - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/16647/info sNews is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabiliti...
CVE-2006-0668
CVE-2006-0668 describes an SQL injection in the PHP application PwsPHP 1.2.3, specifically via the id parameter in index.php (and possibly in message.php within the espace_membre module). The underlying issue is a lack of input validation/safe query construction, enabling remote attackers to exec...
Sql injection
SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID parameter in the definition Page...
CVE-2006-0651
SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID parameter in the definition Page...
CVE-2006-0651
SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID parameter in the definition Page...
CVE-2006-0651
CVE-2006-0651 describes a SQL injection vulnerability in the vwdev application, where the UID parameter in index.php allows remote attackers to execute arbitrary SQL commands. The issue is rooted in improper input handling in the affected page, enabling an attacker with network access (no authent...
Linpha <= 1.0 multiple arbitrary local inclusion
------------- Linpha = 1.0 multiple arbitrary local inclusion ----------------- software: site: http://linpha.sourceforge.net/nuke/ description: " LinPHA is an easy to use, multilingual, flexible photo / image archive / album / gallery written in PHP. It uses a SQL database to store information...
Path traversal
MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosure, possibly related to invalid SQL syntax...
CVE-2006-0590
MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosure, possibly related to invalid SQL syntax...
CVE-2006-0590
MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosure, possibly related to invalid SQL syntax...
CVE-2006-0546
Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via "evilcode" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in t...
CVE-2006-0546
Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via "evilcode" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in t...
CVE-2006-0546
Technical details about CVE-2006-0546 are not publicly provided in the supplied documents; none of the connected records include affected product/version, root cause, or remediation. Monitor for updates.
CVE-2006-0506
Cross-site scripting XSS vulnerability in index.php in Nuked-klaN 1.7 allows remote attackers to inject arbitrary web script or HTML via the letter parameter...
CVE-2005-4702
CVE-2005-4702 is an SQL injection vulnerability affecting IPBProArcade 2.5.2, reported for index.php (gameid parameter). The description indicates remote attackers could inject arbitrary SQL commands, with sources noting possible confusion with shell metacharacter-related issues and potential red...
Invision Power Board Dragoran Forum < 1.4 index.php site Parameter SQL Injection
Binary data 3397.prm...
MyBB 1.0/1.1 - 'index.php' Referrer Cookie SQL Injection
source: https://www.securityfocus.com/bid/16443/info MyBB is prone to an SQL-injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'index.php' script. Successful exploitation can allow an attacker to bypass authentication and gain...
MyBB 1.01.1 - index.php Referrer Cookie SQL Injection
MyBB 1.01.1 - index.php Referrer Cookie SQL Injection source: https://www.securityfocus.com/bid/16443/info MyBB is prone to an SQL-injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'index.php' script. Successful exploitation can...
[eVuln] Pixelpost Photoblog XSS Vulnerability
New eVuln Advisory: Pixelpost Photoblog XSS Vulnerability http://evuln.com/vulns/45/summary.html --------------------Summary---------------- Software: Pixelpost Photoblog Sowtware's Web Site: http://www.pixelpost.org/ Versions: 1.4.3 Critical Level: Moderate Type: Cross-Site Scripting Class: Remo...