CVE-2009-2307

SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro aka MD-Pro allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php...

Sql injection

SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro aka MD-Pro allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php...

CVE-2009-2307

CVE-2009-2307 affects MAXdev MDPro (aka MD-Pro) CWGuestBook module 2.1 and earlier. The vulnerability is an SQL injection via the rid parameter in a viewrecords action to modules.php, enabling remote data manipulation as described in the CVE entry. Connected documents corroborate the vulnerabilit...

CVE-2009-2307: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro aka MD-Pro allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php...

CVE-2008-6779

The CVE-2008-6779 entry corresponds to a SQL injection in the Sarkilar module for PHP-Nuke. The vulnerability affects the Sarkilar module and is exploitable via the id parameter in the showcontent action to modules.php, allowing remote attackers to execute arbitrary SQL commands. The reported imp...

CVE-2008-6779: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Sarkilar module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a showcontent action to modules.php...

Sql injection

SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php...

CVE-2008-6728: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php...

Sql injection

SQL injection vulnerability in the ResendEmail module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary SQL commands via the userprefix parameter to modules.php...

CVE-2009-0672: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the ResendEmail module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary SQL commands via the userprefix parameter to modules.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in MeetWeb 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 modules.php, 2 ManagerResource.class.php, 3 ManagerRightsResource.class.php, 4 RegForm.class.php, 5 RegResource.class.php, and 6...

CVE-2008-5944

Cross-site scripting XSS vulnerability in modules.php in NavBoard 16 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the module parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in modules.php in NavBoard 16 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the module parameter...

CVE-2008-5944

NavBoard 16 (2.6.0) has a cross-site scripting vulnerability in modules.php exploitable via the module parameter. Per NVD, CVE-2008-5944 enables remote script injection with network access, high complexity, no authentication, and partial integrity impact; no remediation details are provided in th...

CVE-2008-5944

Cross-site scripting XSS vulnerability in modules.php in NavBoard 16 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the module parameter...

CVE-2008-5943

Multiple directory traversal vulnerabilities in NavBoard 16 2.6.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter to 1 adminmodules.php and 2 modules.php...

CVE-2008-5943

NavBoard 16 (2.6.0) contains multiple directory traversal vulnerabilities enabling remote inclusion/execution of local files via … in the module parameter to admin_modules.php or modules.php. CVSS v2 base score 7.5 (HIGH); network attack vector, low difficulty, no authentication required, partial...

CVE-2008-5943: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in NavBoard 16 2.6.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter to 1 adminmodules.php and 2 modules.php...

CVE-2008-5944: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules.php in NavBoard 16 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the module parameter...

CVE-2008-5039

Cross-site scripting XSS vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web script or HTML via the tid parameter in a team action to modules.php...