CVE-2010-4783: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 siteurl and 2 urlbanner parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchword parameter to search.php or 2 siteurl parameter to add.php...

CVE-2006-2956

Multiple cross-site scripting XSS vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchword parameter to search.php or 2 siteurl parameter to add.php...

CVE-2006-2956: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchword parameter to search.php or 2 siteurl parameter to add.php...

CVE-2005-3571

PHP file inclusion vulnerability in protection.php in CodeGrrl a PHPCalendar 1.0, b PHPClique 1.0, c PHPCurrently 2.0, d PHPFanBase 2.1, and e PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when registerglobals is enabled. NOTE: It was later...

CVE-2005-3571: Improper Control of Generation of Code

PHP file inclusion vulnerability in protection.php in CodeGrrl a PHPCalendar 1.0, b PHPClique 1.0, c PHPCurrently 2.0, d PHPFanBase 2.1, and e PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when registerglobals is enabled. NOTE: It was later...

CVE-2004-2191: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 msg0 or 2 siteurl parameters...