27 matches found
CVE-2006-6778
CVE-2006-6778 is an XSS vulnerability in TimberWolf 1.2.2, exposed via shownews.php and the nid parameter. The affected component is the shownews.php endpoint of TimberWolf 1.2.2, allowing remote attackers to inject arbitrary web script or HTML. The CVSS data from NVD indicates AV:N/AC:M/Au:N/C:P...
CVE-2006-6778
Cross-site scripting XSS vulnerability in shownews.php in TimberWolf 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the nid parameter...
Cline Communications Sql injection
Cline Communications Sql injection ------------------------------------- Site:http://www.celerondude.com/ Demo:http://www.liveelite.com/ --------------------------------- Sql injection 1,photoenlarged.php file PhotoID parameter 2,newsdetail.php file NID parameter 3,staffphotoenlarged.php file...
CVE-2006-2763
SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 id parameter to a index.php, and the 2 nid parameter to b newsdetail.php, c emailstory.php, d thankyou.php, e printableview.php, f tellafriend.php, and g sendcomments.php. NOTE:...
CVE-2006-2678
Multiple cross-site scripting XSS vulnerabilities in Pre News Manager 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a index.php, and the 2 nid parameter to b newsdetail.php, c emailstory.php, d thankyou.php, e printableview.php, f tellafriend.php, and...