Searching mainphp software vulnerabilities

SQL injection vulnerability in PCPIN Chat 5.0.4

vulnerability | injection | PCPIN | Chat | SQL |

SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field (login parameter) to main.php.


Multiple SQL injection vulnerabilities in APBoa

vulnerabilities | arbitrary | injection | attackers | commands | Multiple | execute | earlier | APBoard | remote | 22-r3 | allow | via | SQL |

Multiple SQL injection vulnerabilities in APBoard 2.2-r3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) PHPSESSID parameter in board.php and (2) viewcatmod parameter in main.php.


Multiple PHP remote file inclusion vulnerabilit

vulnerabilities | inclusion | attackers | parameter | arbitrary | Multiple | Johannes | earlier | execute | Erdfelt | remote | config | allow | Kawf | code | file | PHP | via | URL |

Multiple PHP remote file inclusion vulnerabilities in Johannes Erdfelt Kawf 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the config parameter in (1) main.php or (2) user/account/main.php.


Multiple cross-site scripting (XSS) vulnerabili

cross-site | scripting | Multiple |

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers to inject arbitrary web script or HTML via the (1) unlim_num_rows, (2) sql_query, or (3) pos parameter to (a) tbl_export.php; the (4) session_max_rows or (5) pos parameter to (b) sql.php; the (6) username parameter to (c) server_privileges.php; or the (7) sql_query parameter to (d) main.php. NOTE: vector 5 might be a regression or incomplete fix for CVE-2006-6942.7.


Software vulnerabilities results 1 to 5 of 5     
Page: 1