Sql injection

SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via the site parameter...

CVE-2008-4086

SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...

Sql injection

SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...

CVE-2008-4086

SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...

CVE-2008-2792

SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the site parameter...

Sql injection

SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the site parameter...

CVE-2007-2009

PHP remote file inclusion vulnerability in index.php in SimpCMS Light 04.10.2007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site parameter...

Design/Logic Flaw

PHP file inclusion vulnerability in admin/index.php in ScarAdControl ScarAdController 1.1 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the site parameter, which is accessed by the fileexists function...

PT-2006-5154 · Toenda · Toendacms

Name of the Vulnerable Software and Affected Versions: ToendaCMS versions 1.0.3 and earlier Description: A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via a URL in the tcms administer site parameter to an unspecified script, probably 'index.php'. Note that th...

Portal 1.4.7 by Dragoran

Portal 1.4.7 by Dragoran SQL injection в параметре site пример уязвимости: http://targethost.com/index.php?act=portal&site=120union20select20null,null,null,null,null,null/ /dev/0id UKR Security Team...

CVE-2006-1199

Cross-site scripting XSS vulnerability in iframe.php in daverave Link Bank allows remote attackers to inject arbitrary web script or HTML via the site parameter...

CVE-2006-1199

Cross-site scripting XSS vulnerability in iframe.php in daverave Link Bank allows remote attackers to inject arbitrary web script or HTML via the site parameter...

CVE-2005-3558

PHP file inclusion vulnerability in index.php in OSTE 1.0 allows remote attackers to execute arbitrary code via the 1 page and 2 site parameters...

PT-2004-1295 · Vbulletin · Vbulletin

Name of the Vulnerable Software and Affected Versions: vBulletin affected versions not specified Description: A cross-site scripting XSS issue in register.php allows remote attackers to inject arbitrary HTML or web script via the reg site or possibly regsite parameter. The vendor has disputed thi...