46 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in track.php in phpmyfamily 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...
CVE-2006-1425
Cross-site scripting XSS vulnerability in track.php in phpmyfamily 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...
phpMyFamily 1.4.1 - 'Track.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17278/info The 'phpmyfamily' application is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execut...
CVE-2006-1425: Undefined Security Weakness
Cross-site scripting XSS vulnerability in track.php in phpmyfamily 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...
CVE-2005-0841
SQL injection vulnerability in 1 people.php, 2 track.php, 3 edit.php, 4 document.php, 5 census.php, 6 passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands, as demonstrated via 1 the person parameter to people.php or 2 the Login...
CVE-2005-0841
SQL injection vulnerability in 1 people.php, 2 track.php, 3 edit.php, 4 document.php, 5 census.php, 6 passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands, as demonstrated via 1 the person parameter to people.php or 2 the Login...