CVE-2008-3555: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in 1 WSN Forum 4.1.43 and earlier, 2 Gallery 4.1.30 and earlier, 3 Knowledge Base WSNKB 4.1.36 and earlier, 4 Links 4.1.44 and earlier, and possibly 5 Classifieds before 4.1.30 allows remote attackers to include and execute arbitrary local files via ...

CVE-2008-2793

SQL injection vulnerability in groupposts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2008-2793

SQL injection vulnerability in groupposts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2008-2793: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in groupposts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

Sql injection

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2008-2223: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2008-1351: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php...

Sql injection

SQL injection vulnerability in index.php in the Quiz comquiz 0.81 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

CVE-2008-0800: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the McQuiz commcquiz 0.9 Final component for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

CVE-2008-0799: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Quiz comquiz 0.81 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

CVE-2006-6149

CVE-2006-6149 affects JiRos FAQ Manager 1.0, where the vulnerability resides in the web-facing code: SQL injection via the tID parameter in index.asp. The underlying issue is improper input handling in the application that allows constructing and executing arbitrary SQL commands on the backend da...

CVE-2006-6149: Undefined Security Weakness

SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the tID parameter...

CVE-2006-3241

Cross-site scripting XSS vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter...

CVE-2006-3241: Undefined Security Weakness

Cross-site scripting XSS vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter...

Sql injection

SQL injection vulnerability in modules.php in 4nNukeWare 4nForum 0.91 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2006-2760

CVE-2006-2760 affects 4nNukeWare 4nForum 0.91; the vulnerability is a SQL injection in modules.php via the tid parameter. Remote attackers may be able to execute arbitrary SQL commands. The available records identify the affected software and vulnerable parameter but do not provide patch/version ...

CVE-2006-2760: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules.php in 4nNukeWare 4nForum 0.91 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Devsyn Open Bulletin Board OpenBB 1.0.6 allow remote attackers to inject arbitrary web script or HTML via 1 the FID parameter in board.php and 2 the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612...

CVE-2006-2088

Multiple cross-site scripting XSS vulnerabilities in Devsyn Open Bulletin Board OpenBB 1.0.6 allow remote attackers to inject arbitrary web script or HTML via 1 the FID parameter in board.php and 2 the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612...

CVE-2006-2088: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Devsyn Open Bulletin Board OpenBB 1.0.6 allow remote attackers to inject arbitrary web script or HTML via 1 the FID parameter in board.php and 2 the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612...