34 matches found
CVE-2014-4851: Undefined Security Weakness
Open redirect vulnerability in msg.php in FoeCMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the r parameter...
Dominant Creature BBGRPG Browser Game - Persistent Cross-Site Scripting
Dominant Creature BBGRPG Browser Game - Persistent Cross-Site Scripting =================================================================================== Dominant Creature BBG/RPG browser game XSS vulnerabilities ==================================================================================...
CVE-2007-3518
SQL injection vulnerability in msg.php in HispaH YouTube Clone Script youtubeclone allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-3518: Undefined Security Weakness
SQL injection vulnerability in msg.php in HispaH YouTube Clone Script youtubeclone allows remote attackers to execute arbitrary SQL commands via the id parameter...
YouTube Clone Script (msg.php id) Remote SQL Injection Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ YouTube Clone Script SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz &...
YouTube Clone Script - msg.php?id SQL Injection
YouTube Clone Script - msg.php?id SQL Injection --==+================================================================================+==-- --==+ YouTube Clone Script SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR...
CVE-2007-2018
SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter...
CVE-2007-2018
SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter...
CVE-2007-2018
Affected software: AlstraSoft Video Share Enterprise. Vulnerable component: msg.php. Root cause: SQL injection via the id parameter. Impact: remote authenticated users can execute arbitrary SQL commands. Attack vector/conditions: network access; low complexity; single authentication required. Sco...
CVE-2007-2018
SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter...
CVE-2007-2018: Undefined Security Weakness
SQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote authenticated users to execute arbitrary SQL commands via the id parameter...
CVE-2005-3496: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in PHP Handicapper allows remote attackers to inject arbitrary web script or HTML via the msg parameter to msg.php. NOTE: some sources identify a second vector in the login parameter to processsignup.php, but the original source says that it is for CRLF...
CVE-2005-0883: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject arbitrary web script or HTML via 1 the mt parameter to the membres.php page or 2 the -afs-1- query string to the msg.php page...
CVE-2005-0883
Multiple cross-site scripting XSS vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject arbitrary web script or HTML via 1 the mt parameter to the membres.php page or 2 the -afs-1- query string to the msg.php page...