1625 matches found
CVE-2008-6589
Multiple cross-site scripting XSS vulnerabilities in LightNEasy "no database" aka flat version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 index.php and 2 LightNEasy.php...
CVE-2008-6591: Improper Control of Generation of Code
LightNEasy "no database" aka flat version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to 1 index.php and 2 LightNEasy.php...
CVE-2008-6589: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in LightNEasy "no database" aka flat version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 index.php and 2 LightNEasy.php...
CVE-2008-6198: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2008-6164: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2008-6130: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 action and 2 page parameters...
CVE-2009-0393: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to inject arbitrary web script or HTML via the page parameter...
CVE-2008-5879
Cross-site scripting XSS vulnerability in index.php in Phpclanwebsite aka PCW 1.23.3 Fix Pack 5 and earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter and other unspecified vectors...
CVE-2008-5879: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Phpclanwebsite aka PCW 1.23.3 Fix Pack 5 and earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter and other unspecified vectors...
CVE-2008-5097: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in MyFWB 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...
Sql injection
SQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2008-4647: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2008-4349: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 page parameter in a details action...
Sql injection
SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitrary SQL commands via the page pageid parameter...
CVE-2008-4046: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...
CVE-2008-3941: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter in a search action to the default URI...
CVE-2008-3720: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in DeeEmm CMS DMCMS 0.7.4 allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the id vector is already covered by CVE-2007-5679...
CVE-2008-3559: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web script or HTML via the 1 filename parameter to search.asp and the 2 page parameter to order.asp. NOTE: the provenance of this information is unknown; the details are obtained solely...