CVE-2006-0112

Cross-site scripting XSS vulnerability in index.php in Enhanced Simple PHP Gallery 1.7 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2005-4630

SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands via the 1 billshowid, 2 billdetailid, 3 fuse, and 4 frmClientID parameters...

CVE-2005-4628

Technical details about CVE-2005-4628 are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain affected product versions, impact, and remediation information.

CVE-2005-4630

CVE-2005-4630 affects ClientExec 2.3. It is a SQL injection vulnerability in index.php that allows remote attackers to execute arbitrary SQL commands via the parameters (billshowid, billdetailid, fuse, frmClientID). The issue enables manipulation of backend queries and can lead to data exposure o...

CVE-2006-0111

Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...

Cross site scripting

Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...

CVE-2006-0111

Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...

CVE-2006-0111

The CVE-2006-0111 entry describes a Cross-site scripting (XSS) vulnerability in the Boxcar Media Shopping Cart, specifically in index.php. The affected component is the index.php handler, with the vulnerability exploitable via the (1) parent and (2) pg URL parameters. Attackers can inject arbitra...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...

CVE-2006-0101

Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...

CVE-2005-4627

CVE-2005-4627 is a cross-site scripting (XSS) vulnerability described for index.php affecting GmailSite 1.0–1.0.4 and GFHost 0.1.1–0.4.2. The issue allows remote attackers to inject arbitrary web script or HTML via the lng parameter, impacting confidentiality/ integrity of affected sessions as pe...

CVE-2006-0101

Multiple cross-site scripting XSS vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p and 2 keyword parameters in a index.php and b search.php...

CVE-2006-0093

Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-0093

Cross-site scripting XSS vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-0090

CVE-2006-0090 describes a directory traversal vulnerability in IDV Directory Viewer (index.php) prior to 2005.1. An attacker can exploit the vulnerability by supplying a "dir" parameter containing ".." to view arbitrary directory contents. The connected documents confirm the affected product and ...

CVE-2006-0086

Cross-site scripting vulnerability in index.php in Next Generation Image Gallery 0.0.1 Lite Edition allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-0093

CVE-2006-0093 describes a Cross-site Scripting (XSS) vulnerability in index.php of @Card ME PHP. The issue allows remote attackers to inject arbitrary web script or HTML via the cat parameter. According to the NVD entry, the flaw has a CVSS v2 base score of 4.3 (Medium) with network access and no...

CVE-2005-4616

SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the includefile parameter...

CVE-2005-4616

CVE-2005-4616 concerns an SQL injection in index.php of iSupport 1.06 via the include_file parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, impacting confidentiality, integrity, and availability (as per the provided CVSS metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P, ...