CVE-2014-4583: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in forms/messages.php in the WP-Contact wp-contact-sidebar-widget plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 edit, 2 orderdirection, 3 limitstart, 4 id, or 5 order parameter...

PT-2014-2495

Name of the Vulnerable Software and Affected Versions PHP-Fusion versions prior to 7.02.06 Description The issue allows remote attackers to execute arbitrary SQL commands via various parameters in different PHP files, including the orderby parameter to "downloads.php", and several parameters in...

CVE-2013-1804: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbitrary web script or HTML via the 1 highlight parameter to forum/viewthread.php; or remote authenticated users with certain permissions to inject arbitrary web script or HTML via the...

CVE-2008-6850: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in messages.php in PHP-Fusion 6.01.17 and 7.00.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...

CVE-2008-6017

SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...

CVE-2008-6017: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...

I-Rater Basic - SQL Injection

I-Rater Basic - SQL Injection I-Rater Basicmessages.php SQL-injection. Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ! Script Name: I-Rater Basic ! Home Page: http://www.i-rater.com ! GoogleDork: N/A Example:...

I-Rater Basic (messages.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== I-Rater Basic messages.php Remote SQL Injection Vulnerability =============================================================== I-Rater Basicmessages.php SQL-injection. Author :...

CVE-2008-5335

CVE-2008-5335 describes an SQL injection in PHP-Fusion before remediation: in messages.php, versions 6.01.15 and 7.00.1 allow remote attackers to inject SQL via the subject and msg_send parameters when magic_quotes_gpc is disabled. The root cause is improper handling of user input in these fields...

CVE-2008-5335: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the subject and msgsend parameters, a different vector than CVE-2005-3157, CVE-2005-3158, CVE-2005-3159, CVE-2005-4005, and...

TLM CMS 3.2 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. TLM CMS v3.2 - Multiple Remote SQL Injection Vulnerabilities Vendor : http://tlm.hebserv.fr/ Download : http://tlm.hebserv.fr/modfile/upload/tlmcms32.zip Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net Kutu pada...

Information disclosure

Group-Office before 2.16-13 does not properly validate user IDs, which allows remote attackers to obtain sensitive information via certain requests for 1 message.php and 2 messages.php in modules/email/. NOTE: some of these details are obtained from third party information...

CVE-2007-2720: Undefined Security Weakness

Group-Office before 2.16-13 does not properly validate user IDs, which allows remote attackers to obtain sensitive information via certain requests for 1 message.php and 2 messages.php in modules/email/. NOTE: some of these details are obtained from third party information...

CVE-2006-3241

Cross-site scripting XSS vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter...

CVE-2006-3241: Undefined Security Weakness

Cross-site scripting XSS vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter...

CVE-2006-2459

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL commands via the srchwhere parameter...

Sql injection

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL commands via the srchwhere parameter...

CVE-2006-2459

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL commands via the srchwhere parameter...

CVE-2006-2459: Undefined Security Weakness

SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL commands via the srchwhere parameter...