CVE-2009-2886

SQL injection vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to execute arbitrary SQL commands via the rank parameter...

CVE-2009-2887

Cross-site scripting XSS vulnerability in bios.php in PHP Scripts Now President Bios allows remote attackers to inject arbitrary web script or HTML via the rank parameter...

CVE-2009-2889

Cross-site scripting XSS vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or HTML via the letters parameter...

CVE-2009-2891

CVE-2009-2891 describes an SQL injection in list.php of PHP Scripts Now Riddles, exploitable via the catid parameter. The underlying issue is improper handling of user-supplied input, enabling remote attackers to execute arbitrary SQL commands. Affected component: list.php within the PHP Scripts ...

CVE-2009-2885

CVE-2009-2885 describes an SQL injection in bios.php of PHP Scripts Now World’s Tallest Buildings, exploitable via the rank parameter to allow remote command execution against the database. The vulnerability is caused by unsanitized input incorporated into SQL queries. Documented impact is partia...

CVE-2009-2888

SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL commands via the n parameter...

CVE-2009-2890

Cross-site scripting XSS vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...

CVE-2009-2887

CVE-2009-2887 describes a Cross-site scripting (XSS) vulnerability in bios.php of PHP Scripts Now President Bios. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the rank parameter. The NVD entry provides a CVSS v2 base score of 4.3 (Medium) with network attac...

CVE-2009-2884

CVE-2009-2884 describes an XSS flaw in bios.php of PHP Scripts Now World's Tallest Buildings. The vulnerability allows remote attackers to inject arbitrary web script or HTML by manipulating the rank parameter. Affects bios.php in the cited package (no vendor/product version details provided). Th...

CVE-2009-2886

The CVE refers to a SQL injection vulnerability in the PHP Scripts Now product’s bios.php (President Bios) that allows remote attackers to execute arbitrary SQL commands through the rank parameter. Affected component: bios.php in the President Bios module. Root cause: improper input handling/unsa...

CVE-2009-2890

CVE-2009-2890 affects the web app PHP Scripts Now Riddles, with a vulnerability in results.php where the searchquery parameter allows remote injection of arbitrary web script or HTML (reflected XSS). Root cause: lack of proper input sanitization on the searchquery parameter. Impact: enables injec...

PHP Scripts Now Riddles - riddleslist.php?catid SQL Injection

PHP Scripts Now Riddles - riddleslist.php?catid SQL Injection source: https://www.securityfocus.com/bid/44309/info PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting...

PHP Scripts Now Riddles - '/riddles/list.php?catid' SQL Injection

source: https://www.securityfocus.com/bid/44309/info PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

PHP Scripts Now Riddles - '/riddles/results.php?searchQuery' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44309/info PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

PHP Scripts Now (Multiple Products) - bios.php?rank Cross-Site Scripting

PHP Scripts Now Multiple Products - bios.php?rank Cross-Site Scripting source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting...

PHP Scripts Now (Multiple Products) - bios.php?rank SQL Injection

PHP Scripts Now Multiple Products - bios.php?rank SQL Injection source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting this...

PHP Scripts Now (Multiple Products) - 'bios.php?rank' SQL Injection

source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting this vulnerability could allow an attacker to steal cookie-based...

PHP Scripts Now (Multiple Products) - 'bios.php?rank' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting this vulnerability could allow an attacker to steal cookie-based...