CVE-2005-3408

SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL commands via the limit parameter...

CVE-2005-3408

CVE-2005-3408 : SQL injection in news.php of gCards version 1.43, caused by unsafely using the limit parameter in an SQL query. This enables remote attackers to execute arbitrary SQL commands. The vulnerability is described with a CVSSv2 base score of 7.5 (High) with network attack vector, requir...

CVE-2005-3408: Undefined Security Weakness

SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL commands via the limit parameter...

CVE-2004-2511

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the year, 2 month, and 3 day parameters in calendar.php; 4 the cid and 5 url parameters in index.php; 6 the cid parameter in annoucement.php; 7 the...

CVE-2004-2511: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the year, 2 month, and 3 day parameters in calendar.php; 4 the cid and 5 url parameters in index.php; 6 the cid parameter in annoucement.php; 7 the...

CVE-2005-3201

SQL injection vulnerability in news.php for Utopia News Pro UNP 1.1.3, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter...

CVE-2005-3201

SQL injection vulnerability in news.php for Utopia News Pro UNP 1.1.3, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter...

CVE-2005-3201: Undefined Security Weakness

SQL injection vulnerability in news.php for Utopia News Pro UNP 1.1.3, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to execute arbitrary SQL via the newsid parameter...

CVE-2005-2896: Undefined Security Weakness

SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the 1 wnuserpw parameter to startup.php, 2 cat, 3 id, or 4 stof parameter to news.php, or 5 id parameter to print.php...

CVE-2004-2364: Undefined Security Weakness

Cross-site request forgery CSRF vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using 1 admin/page.php, 2 admin/news.php, 3 admin/user.php, 4 admin/images.php, 5...

CVE-2005-2156

CVE-2005-2156 describes a SQL injection in PHPNews 1.2.5 via the prevnext parameter in news.php. A remote attacker could exploit this to influence database queries and potentially expose information. Related advisories corroborate exploitation potential and indicate the issue affects PHPNews prio...

CVE-2005-2156: Undefined Security Weakness

SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the prevnext parameter...

CVE-2004-2042

Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via 1 content parameter to content.php, 2 contentid parameter to content.php, or 3 list parameter to news.php...

CVE-2004-2042: Undefined Security Weakness

Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via 1 content parameter to content.php, 2 contentid parameter to content.php, or 3 list parameter to news.php...

CVE-2005-1237

Vulnerability summary (CVE-2005-1237) : The issue affects FlexPHPNews 0.0.3, specifically the news.php component. It is a SQL injection vulnerability exploitable via the newsid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD metadata reports a network-facing vector...

CVE-2005-1237

SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2005-1237: Undefined Security Weakness

SQL injection vulnerability in news.php in FlexPHPNews 0.0.3 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2005-1054: Undefined Security Weakness

PHP remote file inclusion vulnerability in news.php in ModernBill 4.3.0 and earlier allows remote attackers to execute arbitrary PHP code by modifying the DIR parameter to reference a URL on a remote web server that contains the code...

ModernGigabyte ModernBill 4.3 - 'news.php' File Inclusion

source: https://www.securityfocus.com/bid/13086/info ModernBill is prone to a remote file include vulnerability. The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the 'news.php' script. ModernBill 4.3 and prior versions are...

ModernGigabyte ModernBill 4.3 - news.php File Inclusion

ModernGigabyte ModernBill 4.3 - news.php File Inclusion source: https://www.securityfocus.com/bid/13086/info ModernBill is prone to a remote file include vulnerability. The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the...