CVE-2005-3017: Undefined Security Weakness

PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files via the show parameter, which can lead to resultant errors such as path disclosure, SQL error messages, and cross-site scripting XSS...

pluggedBlog.txt

Plugged-Blog XSS and SQL-Injection flaw & Remove Admin vendor url: http://www.pluggedout.com advisory: http://falcondeoro.blogspot.com/2005/07/plugged-blog-xss-and-sql-injection.html vendor notify: yes exploit available: yes Plugged-Blog is a CMS WebBlog-Portal content management systen, theinsta...

CVE-2005-2399

PHP Surveyor 0.98 allows remote attackers to trigger SQL errors via missing parameters to 1 browse.php, 2 export.php, 3 conditions.php, or 4 spss.php...

CVE-2005-2399: Undefined Security Weakness

PHP Surveyor 0.98 allows remote attackers to trigger SQL errors via missing parameters to 1 browse.php, 2 export.php, 3 conditions.php, or 4 spss.php...

[SECURITYREASON.COM][phpBB 2.0.13 SQL error in session cXIb8O3.8]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpBB 2.0.13 SQL error in session cXIb8O3.8 Author: Maksymilian Arciemowicz cXIb8O3 Date: 10.3.2005 from securityreason.com TEAM - --- 0.Description --- phpBB is a high powered, fully scalable, and highly customizable Open Source bulletin board packag...

XSS in & path disclosure phpBB forums

Affected versions: Dunno All? Code: http://www.phpbb.com/phpBB/search.php?searchid=3D1'scriptalert/guiler= minator20overload,20vampirun20mugroson/;/script Overview The error is like: ---------------- Could not obtain search results DEBUG MODE SQL Error : 1064 You have an error in your SQL syntax...

ColdFusion SQL Error Pages XSS

---------- NOTE ABOUT COLDFUSION XSS ATTACKS Vendor: Macromedia Versions: MX 6.0 tested , older ? PROBLEM: When you access to an error page of sql you can insert xss code to be shown in the error uotput of the sql backend. example: http://target/article.cfm?id=1'scriptalertdocument.cookie;/script...

Macromedia ColdFusion MX 6.0 - SQL Error Message Cross-Site Scripting

Macromedia ColdFusion MX 6.0 - SQL Error Message Cross-Site Scripting source: https://www.securityfocus.com/bid/8840/info It has been reported that Macromedia ColdFusion MX may be prone to a cross-site scripting vulnerability due to improper handling of error messages generated by the underlying...

Exploitable NCM.at - Content Management System

--------------------------------------------------------------------------- Possible Security Problem in NCM - Content Management System Package name: NCM Content Management System Severity: Possible direct access to database of content Date: 2001-04-10 Affected versions: ?, no information from t...