CVE-2009-3903: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in jspui/index.jsp in ManageEngine Netflow Analyzer 7.5 build 7500 allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 section parameters. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2008-7033: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Simple Shop Galore comsimpleshop component for Joomla! allows remote attackers to execute arbitrary SQL commands via the section parameter in a section action to index.php, a different vulnerability than CVE-2008-2568. NOTE: this issue was disclosed by an...

Sql injection

SQL injection vulnerability in include/getread.php in Extensible-BioLawCom CMS X-BLC 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter...

CVE-2009-2310: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in include/getread.php in Extensible-BioLawCom CMS X-BLC 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter...

CVE-2009-2100: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the JoomlaPraise Projectfork comprojectfork component 2.0.10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php...

CVE-2008-6385

Cross-site scripting XSS vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2008-6385

Cross-site scripting XSS vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2008-6385: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in W3matter RevSense 1.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2008-5338: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in info.php in Bandwebsite aka Bandsite portal system 1.5 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2008-5271

Cross-site scripting XSS vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2008-5271: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2008-2818

Directory traversal vulnerability in Easy-Clanpage 3.0 b1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the section parameter to the default URI...

CVE-2008-2818: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Easy-Clanpage 3.0 b1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the section parameter to the default URI...

CVE-2008-0255: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter...

CVE-2007-2470: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page, 2 module, or 3 section parameter...

PT-2006-6422 · Atutor · Atutor

Name of the Vulnerable Software and Affected Versions: ATutor version 1.5.3.2 Description: The issue allows remote attackers to execute arbitrary PHP code. This can be achieved via several parameters in different PHP files, including the section parameter in "documentation/common/frame toc.php" a...

CVE-2006-5318: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Nayco JASmine aka Jasmine-Web allows remote attackers to execute arbitrary PHP code via an FTP URL in the section parameter...

CVE-2005-3404: Undefined Security Weakness

Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the section parameter followed by a null byte %00 in 1 bodyheader.inc.php and 2 print.php...