Sql injection

Multiple SQL injection vulnerabilities in Tourism Script Accommodation Hotel Booking Portal Script allow remote attackers to execute arbitrary SQL commands via the hotelid parameter to 1 hotel.php, 2 details.php, 3 roomtypes.php, 4 photos.php, 5 map.php, 6 weather.php, 7 reviews.php, and 8 book.p...

LiveZilla "map.php"跨站脚本漏洞

CVE ID：CVE-2009-4450 LiveZilla是一款在线客服与客户地理位置跟踪系统。 LiveZilla包含的'Map.php'脚本不正确过滤用户输入，远程攻击者可以通过提交恶意脚本代码作为"lat", "lng"和"zom"参数数据，诱使用户解析，可导致在目标用户浏览器上执行恶意脚本代码，获得敏感信息。 GmbH LiveZilla 3.1.8.3 目前没有解决方案提供： http://www.livezilla.net/home/en/...

LiveZilla v3.1.8.3 XSS Vulnerability

No description provided by source. Info: LiveZilla, the Next Generation Live Help / Live Chat and Live Support System connects you to your website visitors. Use LiveZilla to provide Live Chats and monitor your website visitors in real-time. Convert visitors to customers - with LiveZilla! Credits:...

CVE-2009-4450

Multiple cross-site scripting XSS vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the 1 lat, 2 lng, and 3 zom parameters, which are not properly handled when processed with templates/map.tpl...

CVE-2009-4450

LiveZilla

CVE-2009-4450

Multiple cross-site scripting XSS vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the 1 lat, 2 lng, and 3 zom parameters, which are not properly handled when processed with templates/map.tpl...

CVE-2009-4450: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the 1 lat, 2 lng, and 3 zom parameters, which are not properly handled when processed with templates/map.tpl...

CVE-2008-6422: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PsychoStats 2.3, 2.3.1, and 2.3.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 weapon.php and 2 map.php...