CVE-2006-4328

SQL injection vulnerability in admin.php in CloudNine Interactive Links Manager 2006-06-12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter...

CVE-2006-1107

Cross-site scripting XSS vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the nick parameter...

CVE-2006-1107

Cross-site scripting XSS vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the nick parameter...

CVE-2006-1107

CVE-2006-1107 concerns NMDeluxe prior to 1.0.1, where the vulnerable script is news.php. The root cause is an XSS flaw in the nick parameter due to insufficient input sanitization, allowing remote attackers to inject arbitrary web script or HTML. Documents across multiple sources confirm the affe...

PT-2006-2134 · Nmdeluxe · Nmdeluxe

Name of the Vulnerable Software and Affected Versions: NMDeluxe versions prior to 1.0.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the nick parameter in the news.php file. Recommendations: For versions prior to 1.0.1, update to...

CVE-2004-1599

CVE-2004-1599 concerns a Cross-site Scripting (XSS) vulnerability in CoolPHP 1.0-stable, exploitable via index.php using the query or nick parameters. The underlying issue is insufficient input handling in the affected script, allowing an attacker to inject and execute arbitrary web scripts/HTML ...