5 matches found
Reflected XSS with parameters in PostComment
Impact An attacker could inject malicious web code into the users' web browsers by creating a malicious link. Patches The problem is fixed in 4.2.0 References Cross-site Scripting XSS - Reflected CWE-79...
GHSA-58W4-W77W-QV3W Reflected XSS with parameters in PostComment
Impact An attacker could inject malicious web code into the users' web browsers by creating a malicious link. Patches The problem is fixed in 4.2.0 References Cross-site Scripting XSS - Reflected CWE-79...
Lito Lite CMS Multiple Cross Site Scripting / Blind SQL Injection Exploit
No description provided by source. --+++===================================================================================+++-- --+++====== Lito Lite Multiple Cross Site Scripting / Blind SQL Injection Exploit ======+++--...
Invision Gallery 2.0.7 SQL Injection Vulnerability
Invision Gallery 2.0.7 DOS attak can be performed index.php?automodule=gallery&cmd=postcomment&op=doaddcomment&Post=test&img=111 OR id IN SELECT BENCHMARK10000000,BENCHMARK10000000,md5currentdate FROM ipbgalleryimages...
CVE-2006-3173
Multiple PHP remote file inclusion vulnerabilities in ContentBuilder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathcb parameter to a libraries/comment/postComment.php and b modules/poll/poll.php, 2 rel parameter to c modules/archive/overview.inc.php, and the 3...