Searching resultant software vulnerabilities

Cross-site scripting (XSS) vulnerability in get

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in getdox.php in Torrential 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL. NOTE: this might be resultant from CVE-2005-4160.


Cross-site scripting (XSS) vulnerability in ind

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitrary web script or HTML via the page parameter to index.php. NOTE: this might be resultant from CVE-2005-4287.


Cross-site scripting (XSS) vulnerability in Ama

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in Amaxus 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the change parameter. NOTE: it is possible that this is resultant from CVE-2005-4376.


Cross-site scripting (XSS) vulnerability in Nod

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in Nodez 4.6.1.1 allows remote attackers to inject arbitrary web script or HTML via the op parameter. NOTE: it is possible that this issue is resultant from the directory traversal vulnerability.


Cross-site scripting (XSS) vulnerability in dir

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in dir.php in Explorer XP allows remote attackers to inject arbitrary web script or HTML via the chemin parameter. NOTE: it is possible that this issue is resultant from CVE-2006-1492.


Cross-site scripting (XSS) vulnerability in ind

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to inject arbitrary web script or HTML via the _path parameter. NOTE: this might be resultant from the directory traversal issue.


Cross-site scripting (XSS) vulnerability in sea

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in search.php in SaphpLesson 3.0 allows remote attackers to inject arbitrary web script or HTML via the Word parameter. NOTE: it is possible that this issue is resultant from SQL injection.


Cross-site scripting (XSS) vulnerability in ind

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be resultant from the directory traversal vulnerability.


SQL injection vulnerability in page.php in SL_s

vulnerability | arbitrary | attackers | parameter | injection | commands | execute | pagephp | SL_site | id_page | allows | remote | SQL | via |

SQL injection vulnerability in page.php in SL_site 1.0 allows remote attackers to execute arbitrary SQL commands via the id_page parameter. NOTE: this issue could be used to produce resultant XSS from an error message.


Cross-site scripting (XSS) vulnerability in cha

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection.


Cross-site scripting (XSS) vulnerability in new

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in news.php in VARIOMAT allows remote attackers to inject arbitrary HTML or web script via the subcat parameter. NOTE: this issue might be resultant from SQL injection.


Cross-site scripting (XSS) vulnerability in ind

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the STYLE_URL parameter. NOTE: it is possible that this issue is resultant from SQL injection.


users/index.php in Bitweaver 1.3 allows remote

users/indexphp | installation | information | sort_mode | sensitive | parameter | Bitweaver | attackers | resultant | database | message | reveals | invalid | obtain | remote | allows | which | error | path | via |

users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sort_mode parameter, which reveals the installation path and database information in the resultant error message.


Cross-site scripting (XSS) vulnerability in ind

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in index.php in Fotopholder 1.8 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this might be resultant from a directory traversal vulnerability.


Yourfreeworld.com Short Url & Url Tracker Scrip

Yourfreeworldcom | information | attackers | sensitive | parameter | loginphp | Tracker | invalid | message | Script | remote | allows | obtain | leaks | error | which | Short | path | via | Url |

Yourfreeworld.com Short Url & Url Tracker Script allows remote attackers to obtain sensitive information via an invalid id parameter to login.php, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2509.


tr1.php in Yourfreeworld Stylish Text Ads Scrip

Yourfreeworld | installation | attackers | parameter | message | Stylish | invalid | obtain | Script | tr1php | remote | allows | which | leaks | error | path | Text | via | Ads |

tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2508.


Cross-site scripting (XSS) vulnerability in gue

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to inject arbitrary web script or HTML via the entry parameter. NOTE: this issue might be resultant from SQL injection.


download.php in Joonas Viljanen JV2 Folder Gall

config/gallerysetupphp | demonstrated | downloadphp | parameter | sensitive | attackers | Viljanen | pathname | relative | Gallery | Folder | Joonas | allows | remote | files | file | read | JV2 | via |

download.php in Joonas Viljanen JV2 Folder Gallery allows remote attackers to read sensitive files via a relative pathname in the file parameter, as demonstrated by config/gallerysetup.php. NOTE: this issue might be resultant from a directory traversal vulnerability.


SQL injection vulnerability in news.php in DGNe

vulnerability | attackers | parameter | arbitrary | injection | commands | newslist | execute | newsphp | action | allows | DGNews | remote | catid | via | SQL |

SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a newslist action. NOTE: this issue can produce resultant cross-site scripting (XSS).


Cross-site scripting (XSS) vulnerability in low

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to inject arbitrary web script or HTML via the topic parameter. NOTE: this might be resultant from SQL injection.


Software vulnerabilities results 1 to 20 of 95     
Page: 12345►