7 matches found
CVE-2006-2987
Multiple SQL injection vulnerabilities in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 voteid, and 3 vfiel parameters to a index.php, and via the 4 nick, 5 email, 6 city, 7 messen, and 8 message form field parameters to b...
CVE-2006-2987
Multiple SQL injection vulnerabilities in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 voteid, and 3 vfiel parameters to a index.php, and via the 4 nick, 5 email, 6 city, 7 messen, and 8 message form field parameters to b...
CVE-2006-2987
CVE-2006-2987 affects Dominios Europa PICRATE (aka TAL RateMyPic) 1.0. The vulnerability is a set of SQL injection flaws in which arbitrary SQL commands can be injected via parameters to index.php (id, voteid, vfiel) and add.php (nick, email, city, messen, message). The root cause is improper han...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the 1 name aka nick, 2 email, and 3 comment boxes; and via t...
CVE-2006-2812
Multiple cross-site scripting XSS vulnerabilities in index.php in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the 1 name aka nick, 2 email, and 3 comment boxes; and via t...
CVE-2006-2812
CVE-2006-2812 affects Dominios Europa PICRATE (aka TAL RateMyPic) 1.0. Multiple XSS flaws exist in index.php allowing remote attackers to inject arbitrary script/HTML via a javascript: URI in the SRC attribute of an IMG element (in name/nick, email, and comment fields) and via the id parameter. R...
CVE-2006-2812
Multiple cross-site scripting XSS vulnerabilities in index.php in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the 1 name aka nick, 2 email, and 3 comment boxes; and via t...