103 matches found
CVE-2009-2391
CVE-2009-2391 describes a Cross-site Scripting (XSS) vulnerability in Virtuenetz’s Virtue Online Test Generator, specifically in text.php via the tid parameter. The flaw allows remote attackers to inject arbitrary web script or HTML, enabling potential credential or session data theft if the inje...
CVE-2009-2392
SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter...
CVE-2008-5952
SQL injection vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a vtech action to the default URI...
Cross site scripting
Cross-site scripting XSS vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web script or HTML via the tid parameter in a team action to modules.php...
Sql injection
Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via 1 the nid parameter to index.php in a View action to the News module; 2 the vid parameter to index.php in a Result action to the Voting module; 3 the fid parameter t...
Directory traversal
Directory traversal vulnerability in index.php in 1 WSN Forum 4.1.43 and earlier, 2 Gallery 4.1.30 and earlier, 3 Knowledge Base WSNKB 4.1.36 and earlier, 4 Links 4.1.44 and earlier, and possibly 5 Classifieds before 4.1.30 allows remote attackers to include and execute arbitrary local files via ...
CVE-2008-3555
Directory traversal vulnerability in index.php in 1 WSN Forum 4.1.43 and earlier, 2 Gallery 4.1.30 and earlier, 3 Knowledge Base WSNKB 4.1.36 and earlier, 4 Links 4.1.44 and earlier, and possibly 5 Classifieds before 4.1.30 allows remote attackers to include and execute arbitrary local files via ...
CVE-2008-3555
Directory traversal vulnerability in index.php in 1 WSN Forum 4.1.43 and earlier, 2 Gallery 4.1.30 and earlier, 3 Knowledge Base WSNKB 4.1.36 and earlier, 4 Links 4.1.44 and earlier, and possibly 5 Classifieds before 4.1.30 allows remote attackers to include and execute arbitrary local files via ...
CVE-2008-2793
SQL injection vulnerability in groupposts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary SQL commands via the tid parameter...
CVE-2008-2793
SQL injection vulnerability in groupposts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary SQL commands via the tid parameter...
Sql injection
SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...
Sql injection
SQL injection vulnerability in index.php in the Quiz comquiz 0.81 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...
CVE-2006-6149
CVE-2006-6149 affects JiRos FAQ Manager 1.0, where the vulnerability resides in the web-facing code: SQL injection via the tID parameter in index.asp. The underlying issue is improper input handling in the application that allows constructing and executing arbitrary SQL commands on the backend da...
CVE-2006-3241
Cross-site scripting XSS vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter...
Sql injection
SQL injection vulnerability in modules.php in 4nNukeWare 4nForum 0.91 allows remote attackers to execute arbitrary SQL commands via the tid parameter...
CVE-2006-2760
CVE-2006-2760 affects 4nNukeWare 4nForum 0.91; the vulnerability is a SQL injection in modules.php via the tid parameter. Remote attackers may be able to execute arbitrary SQL commands. The available records identify the affected software and vulnerable parameter but do not provide patch/version ...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Devsyn Open Bulletin Board OpenBB 1.0.6 allow remote attackers to inject arbitrary web script or HTML via 1 the FID parameter in board.php and 2 the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612...
CVE-2006-2088
Multiple cross-site scripting XSS vulnerabilities in Devsyn Open Bulletin Board OpenBB 1.0.6 allow remote attackers to inject arbitrary web script or HTML via 1 the FID parameter in board.php and 2 the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612...