CVE-2006-4212

CVE-2006-4212 concerns an SQL injection in Owl Intranet Engine, a PHP-based document management system. The entry states that Owl Intranet Engine 0.90 and earlier is vulnerable and that remote attackers can execute arbitrary SQL commands via unspecified vectors. The connected JVN record notes the...

CVE-2006-4160

CVE-2006-4160 involves multiple PHP remote file inclusion (RFI) vulnerabilities in MVCnPHP 3.0 by Tony Bibbs and Vincent Furia. The flaw allows remote attackers to execute arbitrary PHP code by supplying a crafted URL for the glConf[path_library] parameter in (1) BaseCommand.php, (2) BaseLoader.p...

CVE-2006-4160

Multiple PHP remote file inclusion vulnerabilities in Tony Bibbs and Vincent Furia MVCnPHP 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the glConfpathlibrary parameter to 1 BaseCommand.php, 2 BaseLoader.php, and 3 BaseView.php...

CVE-2006-3386

index.php in Vincent Leclercq News 5.2 allows remote attackers to obtain sensitive information, such as the installation path, via a mail parameter with invalid values...

CVE-2006-3384

SQL injection vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to execute arbitrary SQL commands via the 1 id and 2 texte parameters...

CVE-2006-3385

Cross-site scripting XSS vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject arbitrary web script or HTML via the 1 id and 2 disabled parameters...

CVE-2006-3385

CVE-2006-3385 affects Vincent Leclercq News 5.2, with a vulnerability in divers.php that allows cross-site scripting via the id and disabled parameters. The issue is confirmed by NVD entries; CVSS metrics indicate a base score of 5.8 (Medium) with network attack vector, and partial confidentialit...

CVE-2006-3384

CVE-2006-3384: SQL injection in divers.php of Vincent Leclercq News 5.2 allows remote attackers to execute arbitrary SQL via the id and texte parameters. Affected software: Vincent Leclercq News 5.2. Root cause: improper input handling in divers.php leading to unsafely constructed SQL queries. CV...

CVE-2006-3384

SQL injection vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to execute arbitrary SQL commands via the 1 id and 2 texte parameters...

CVE-2006-3385

Cross-site scripting XSS vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject arbitrary web script or HTML via the 1 id and 2 disabled parameters...

Vincent Leclercq News 5.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/18775/info Vincent Leclercq News is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before displaying it to users of the application. An attacker may leverage this issue to have arbitrary script code...

Vincent-Leclercq News 5.2 - 'Diver.php' SQL Injection

source: https://www.securityfocus.com/bid/18729/info Vincent-Leclercq News is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. An attacker may be able to exploit this issue to modif...