CVE-2008-1875: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Terong PHP Photo Gallery aka Advanced Web Photo Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the photoid parameter...

CVE-2008-1838

SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the joomlaXplorer comjoomlaxplorer Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter in a showerror action to index.php...

CVE-2008-1849

CVE-2008-1849 affects the joomlaXplorer (com_joomlaxplorer) component for Mambo/Joomla! up to version 1.6.2 and earlier. The vulnerability is a directory traversal in index.php, where a .. in the dir parameter of a show_error action can cause listing of arbitrary directories. This is a remote (ne...

CVE-2008-1838: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php...

CVE-2008-1858: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in 724Networks 724CMS 4.01 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-1849: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in the joomlaXplorer comjoomlaxplorer Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter in a showerror action...

CVE-2008-1848: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the joomlaXplorer comjoomlaxplorer Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter in a showerror action to index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 text and 2 ul parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-1800

Multiple cross-site scripting XSS vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script or HTML via the 1 choice, 2 page, 3 zoneadmin, 4 generalsearch, and 5 import parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-1787

Multiple cross-site scripting XSS vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 text and 2 ul parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-1800

CVE-2008-1800 affects DivXDB 2002 0.94b: multiple XSS in index.php exploited through (1) choice, (2) page , (3) zone_admin, (4) general_search, (5) import parameters. Attacker-supplied input can inject arbitrary script/HTML. According to NVD, base score 4.3 (Medium) with network attack vector and...

CVE-2008-1800

Multiple cross-site scripting XSS vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script or HTML via the 1 choice, 2 page, 3 zoneadmin, 4 generalsearch, and 5 import parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-1787

Poplar Gedcom Viewer 2.0 is affected by multiple XSS in index.php via the (1) text and (2) ul parameters. The issue is documented across multiple sources (NVD entry CVE-2008-1787 and related records) and does not provide exploitation details in the connected documents. CVSS metrics from NVD indic...

Classifieds Caffe (index.php cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Classifieds Caffe index.php catid SQL Injection Vulnerability ================================================================ + Info: Software: Classifieds Caffe Exploit:...

CVE-2008-1787: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 text and 2 ul parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

classifiedscaffe-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Classifieds Caffe index.php catid Remote SQL Injection +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

CVE-2008-1800: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script or HTML via the 1 choice, 2 page, 3 zoneadmin, 4 generalsearch, and 5 import parameters. NOTE: the provenance of this information is unknown; the details are...

Classifieds Caffe - 'cat_id' SQL Injection

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Classifieds Caffe index.php catid Remote SQL Injection +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

Dream4 Koobi CMS 4.2.44.2.54.3.0 - Multiple SQL Injections

Dream4 Koobi CMS 4.2.44.2.54.3.0 - Multiple SQL Injections --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Koobi CMS 4.3.0, 4.2.5, 4.2.4 Multiple Remote SQL Injection +==--...