CVE-2010-3606

Multiple directory traversal vulnerabilities in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allow remote emote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 folder and 2 action parameters...

CVE-2010-3607

Cross-site scripting XSS vulnerability in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the id parameter...

CVE-2010-3606

CVE-2010-3606 : In NetArt MEDIA Real Estate Portal 2.0, the file AGENTS/index.php is affected by directory traversal in the folder and action parameters, enabling remote attackers to include and execute arbitrary local files. The NVD description confirms the vulnerability and impact with a CVSS v...

CVE-2010-3607: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the id parameter...

CVE-2010-3606: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allow remote emote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 folder and 2 action parameters...

CVE-2010-3466

Cross-site scripting XSS vulnerability in index.php in the hostedsignup module in NetArt Media iBoutique.MALL 1.2 allows remote attackers to inject arbitrary web script or HTML via the tmpl parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the hostedsignup module in NetArt Media iBoutique.MALL 1.2 allows remote attackers to inject arbitrary web script or HTML via the tmpl parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-3466

CVE-2010-3466 : The vulnerability is a stored/reflected cross-site scripting issue in the NetArt Media iBoutique.MALL 1.2 hosted_signup module, specifically in index.php via the tmpl parameter. The XSS allows remote attackers to inject arbitrary HTML/JavaScript. The affected component is the host...

CVE-2010-3466: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in the hostedsignup module in NetArt Media iBoutique.MALL 1.2 allows remote attackers to inject arbitrary web script or HTML via the tmpl parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-3418

Multiple cross-site scripting XSS vulnerabilities in NetArt Media Car Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 carid parameter to index.php and 2 y parameter to include/images.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in NetArt Media Car Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 carid parameter to index.php and 2 y parameter to include/images.php...

CVE-2010-3418

Multiple cross-site scripting XSS vulnerabilities in NetArt Media Car Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 carid parameter to index.php and 2 y parameter to include/images.php...

CVE-2010-3418

NetArt Media Car Portal is affected by multiple stored/reflected XSS vulnerabilities affecting version 2.0 and earlier. The issue arises in two parameters: (1) car_id in index.php and (2) y in include/images.php, enabling remote attackers to inject arbitrary script/HTML. CVSS base score 4.3 (MEDI...

CVE-2010-3418: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in NetArt Media Car Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 carid parameter to index.php and 2 y parameter to include/images.php...

CVE-2010-0458

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to index.php and the 2 note parameter to blog.php...

Sql injection

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to index.php and the 2 note parameter to blog.php...

CVE-2010-0458

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to index.php and the 2 note parameter to blog.php...

CVE-2010-0458

NetArt Media Blog System 1.5 is affected by multiple SQL injection vulnerabilities. An attacker can remotely inject SQL via the cat parameter to index.php or the note parameter to blog.php, enabling potentially unauthorized data access or modification. CVSS metrics in the primary record indicate ...

CVE-2010-0458: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to index.php and the 2 note parameter to blog.php...

Sql injection

SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...