1126 matches found
CVE-2007-6582
Directory traversal vulnerability in index.php in mBlog 1.2 allows remote attackers to read arbitrary files via a .. dot dot in the page parameter in a page mode action...
CVE-2007-5802
CVE-2007-5802 affects Firewolf Technologies Synergiser 1.2 RC1 and earlier. A directory traversal in index.php allows remote attackers to include and execute arbitrary local files by supplying a .. in the page parameter. This may enable including a local PHP script with a duplicate function decla...
Directory traversal
Directory traversal vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...
CVE-2007-5297
Cross-site scripting XSS vulnerability in index.php in Minki 1.30 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2007-4764
CVE-2007-4764 affects Pawfaliki 0.5.1, where the PHP script pawfaliki.php is vulnerable to a directory-traversal via the page parameter. The root cause is improper handling of relative path components (..), enabling remote attackers to list arbitrary files. The vulnerability is documented in mult...
CVE-2007-3128
SQL injection vulnerability in content.php in WSPortal 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in htdocs/php.php in OpenConcept Back-End CMS 0.4.7 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Arizona Dream Livre d'or livor 2.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2006-7012
scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of a showtext action...
Directory traversal
Directory traversal vulnerability in index.php in Guernion Sylvain Portail Web Php aka Gsylvain35 Portail Web, PwP allows remote attackers to read arbitrary files via a .. dot dot in the page parameter. NOTE: this issue was later reported for 2.5.1.1...
CVE-2006-6951
CVE-2006-6951 describes a cross-site scripting (XSS) flaw in OdysseusBlog’s blog.php, exploitable by supplying a crafted value for the page parameter. Remote attackers could inject arbitrary script/HTML when the affected page is viewed, as reported in the connected documents. The sources confirm ...
EV0134.txt
New eVuln Advisory: Doika guestbook 'page' XSS Vulnerability http://evuln.com/vulns/134/summary.html --------------------Summary---------------- eVuln ID: EV0134 CVE: CVE-2006-4325 Software: Doika guestbook Sowtware's Web Site: http://doika.net/ Versions: 2.5 Critical Level: Harmless Type:...
CVE-2006-4610
PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the page parameter...
CVE-2006-4325
Cross-site scripting XSS vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2006-4224
Cross-site scripting XSS vulnerability in calendar.php in Virtual War VWar 1.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the year parameter. NOTE: The page parameter vector is covered by CVE-2006-4009...
CVE-2006-4009
Cross-site scripting XSS vulnerability in war.php in Virtual War Vwar 1.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2006-3777
PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2006-3249
CVE-2006-3249 describes a SQL injection in Phorum 5.1.14 and earlier via the search.php page parameter. Affected component: Phorum’s search function; root cause: improper handling of the page parameter, enabling arbitrary SQL execution. Impact: remote attackers could run arbitrary SQL commands. V...
PT-2006-4143 · Phorum · Phorum
Name of the Vulnerable Software and Affected Versions: Phorum versions 5.1.14 and earlier Description: A SQL injection issue in the search.php file allows remote attackers to potentially execute arbitrary SQL commands via the page parameter. However, the vendor disputes this report, stating that...