PT-2006-4135 · Dotproject · Dotproject

Name of the Vulnerable Software and Affected Versions: dotProject versions 2.0.3 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the login parameter. Recommendations: F...

CVE-2006-3240: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in classes/ui.class.php in dotProject 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter...

CVE-2006-2423: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the login parameter...

Sql injection

SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field login parameter to main.php...

Sql injection

Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via 1 the catview parameter in calfunctions.inc.php and 2 the login parameter in callogin.php. NOTE: the catview vector might overlap CVE-2005-1865...

Sql injection

Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 monthy parameter to index.php or 2 login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect...

CVE-2006-0403: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 monthy parameter to index.php or 2 login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect...

PT-2006-1384 · Aoblogger · Aoblogger

Name of the Vulnerable Software and Affected Versions: aoblogger version 2.3 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username parameter in the "login.php" file. Recommendations: For aoblogger version 2.3, consider restricting acce...

Cross site scripting

Cross-site scripting XSS vulnerability in the Hosting Control Panel psoft.hsphere.CP in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action...

CVE-2006-0193

Cross-site scripting XSS vulnerability in the Hosting Control Panel psoft.hsphere.CP in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action...

CVE-2006-0193

Cross-site scripting XSS vulnerability in the Hosting Control Panel psoft.hsphere.CP in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action...

CVE-2006-0193: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Hosting Control Panel psoft.hsphere.CP in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action...

CVE-2005-4028

Multiple cross-site scripting XSS vulnerabilities in aMember allow remote attackers to inject arbitrary web script or HTML via the 1 lamemberlogin parameter to sendpass.php and 2 login parameter to member.php...

CVE-2004-1417

Cross-site scripting XSS vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter...

CVE-2004-1417: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter...

CVE-2004-1417

Cross-site scripting XSS vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter...

DEBIAN-CVE-2004-1559

Multiple cross-site scripting XSS vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 redirectto, text, popupurl, or popuptitle parameters to wp-login.php, 2 redirecturl parameter to admin-header.php, 3 popuptitle, popupurl, content, or posttit...

PT-2004-2332 · Unknown · Psychostats

Name of the Vulnerable Software and Affected Versions: PsychoStats versions 2.2.4 Beta and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the login parameter in the login.php file. This could potentially lead to unauthorize...

[SA13619] PsychoStats "login" Cross-Site Scripting Vulnerability

TITLE: PsychoStats "login" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13619 VERIFY ADVISORY: http://secunia.com/advisories/13619/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PsychoStats 2.x http://secunia.com/product/4450/ DESCRIPTION: James...