447 matches found
CVE-2005-1082: Undefined Security Weakness
Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL commands via 1 the id parameter to view.php or 2 the from parameter to members/index.php...
CVE-2004-1424: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2004-1911
Cross-site scripting XSS vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the 1 l parameter aka language variable to index.php or 2 id parameter to view.php...
CVE-2003-0874
CVE-2003-0874 affects DeskPRO 1.1.0 and earlier. The vulnerability arises from multiple SQL injection vectors, including cat and article parameters in faq.php, tickedid in view.php, and the Password field on the logon screen. The underlying issue is improper input handling that allows an attacker...
CVE-2003-0874: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DeskPRO 1.1.0 and earlier allow remote attackers to insert arbitrary SQL and conduct unauthorized activities via 1 the cat parameter in faq.php, 2 the article parameter in faq.php, 3 the tickedid parameter in view.php, and 4 the Password entry on the logo...
Portix-PHP 0.4 - view.php Directory Traversal
Portix-PHP 0.4 - view.php Directory Traversal source: https://www.securityfocus.com/bid/4039/info Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants. Portix-PHP is prone to directory traversal attacks. The script view.php does not...
Portix-PHP 0.4 - 'view.php' Directory Traversal
source: https://www.securityfocus.com/bid/4039/info Portix-PHP is freely available web portal software. It is written in PHP and will run on most Unix and Linux variants. Portix-PHP is prone to directory traversal attacks. The script view.php does not sufficiently filter '../' sequences from web...