CVE-2007-2962

Cross-site scripting XSS vulnerability in search.php in Particle Gallery 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the order parameter...

CVE-2007-2962: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in Particle Gallery 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the order parameter...

Directory traversal

Directory traversal vulnerability in checkvote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to read arbitrary files via a .. dot dot in the order parameter. NOTE: another researcher disputes this vulnerability, noting that the order variable is not used in any context that allows...

CVE-2007-1601: Undefined Security Weakness

Directory traversal vulnerability in checkvote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to read arbitrary files via a .. dot dot in the order parameter. NOTE: another researcher disputes this vulnerability, noting that the order variable is not used in any context that allows...

PT-2007-2983 · Unknown · Weekly Drawing Contest

Name of the Vulnerable Software and Affected Versions: Weekly Drawing Contest version 0.0.1 Description: The issue allows remote attackers to potentially read arbitrary files via a .. dot dot in the order parameter in the check vote.php file. However, it is noted that another researcher disputes...

CVE-2007-1602: Undefined Security Weakness

SQL injection vulnerability in checkvote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2006-6972: Undefined Security Weakness

SQL injection in torrents.php in BtitTracker 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 by and 2 order parameters. NOTE: it is not clear whether this issue is exploitable...

CVE-2006-4871

SQL injection vulnerability in searchrun.asp in Keyvan1 aka Keyvan Janghorbani EShoppingPro 1.0 allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2006-4871: Undefined Security Weakness

SQL injection vulnerability in searchrun.asp in Keyvan1 aka Keyvan Janghorbani EShoppingPro 1.0 allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2006-3580: Undefined Security Weakness

SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2006-1920: Undefined Security Weakness

SQL injection vulnerability in index.php in PMTool 1.2.2 allows remote attackers to execute arbitrary SQL commands via the order parameter in the include files 1 user.inc.php, 2 customer.inc.php, and 3 project.inc.php. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2004-2295: Undefined Security Weakness

SQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2005-2112

XOOPS

Xoops < 2.0.12 Multiple XSS / SQL Injection

Binary data 3041.prm...

CVE-2005-0264: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 expand or 2 order parameter...