CVE-2008-3128: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...

CVE-2008-2536: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting AIH Script 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the t parameter...

CVE-2008-1541: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...

HIS-Webshop (his-webshop.pl t) Remote File Disclosure Vulnerability

Exploit for cgi platform in category web applications =================================================================== HIS-Webshop his-webshop.pl t Remote File Disclosure Vulnerability =================================================================== HIS-Webshop is a shopping-system written ...

CVE-2008-0505: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.15 allow remote attackers to inject arbitrary web script or HTML via the 1 h and 2 t parameters...

CVE-2008-0232: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to index.php, or the 2 f or t parameters to forums/index.php...

CVE-2002-2340: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via 1 the t parameter or 2 the body of an email response...

CVE-2007-5588: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mnoGoSearch before 3.2.43 allows remote attackers to inject arbitrary web script or HTML via the t parameter in search.cgi, as reachable from search.htm-dist...

CVE-2007-5452: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute arbitrary SQL commands via the 1 ip or 2 t parameter...

CVE-2007-3684: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Unobtrusive Ajax Star Rating Bar before 1.2.0 allow remote attackers to execute arbitrary SQL commands via the 1 q and 2 t parameters in a db.php and b rpc.php...

CVE-2007-0952: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net Virtual Calendar allow remote attackers to inject arbitrary web script or HTML via the 1 t and 2 yr parameters, and the 3 sho parameter when the m parameter is outside the intended range...

CVE-2006-3036

Multiple cross-site scripting XSS vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 imgdir parameter in a index.php, and the 2 w, 3 h, and 4 t parameters in b popup.php...

CVE-2006-1669

The CVE-2006-1669 entry documents a SQL injection in phpHeaven Team PHPMyChat 0.14.5 and earlier, exploitable via the T parameter in chat/messagesL.php3. The underlying issue allows remote command execution as the username is later processed in an eval() call, and the username originates from the...

CVE-2006-1669: Undefined Security Weakness

SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitrary SQL commands via the T parameter. NOTE: this issue can be leveraged to execute arbitrary shell commands since the username is later processed in an eval...

PT-2005-4308 · Vubb · Vubb

Name of the Vulnerable Software and Affected Versions: VUBB alpha version rc1 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the t parameter in a "newreply" action. This can occur in the index.php file. Recommendations: F...

CVE-2005-3512: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via the t parameter in a newreply action...

CVE-2005-0414: Undefined Security Weakness

SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with 1 the t parameter or 2 the qu parameter...

CVE-2001-0231: Undefined Security Weakness

Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter...