Show filters
27 Total Results
Displaying 21-27 of 27
Sort by:
Attacker Value
Unknown
CVE-2006-7060
Disclosure Date: February 24, 2007 (last updated October 04, 2023)
cindex.php in Scriptsez.net E-Dating System allows remote attackers to obtain the full path via an invalid id parameter in a dologin action, which leaks the path in an error message.
0
Attacker Value
Unknown
CVE-2006-7061
Disclosure Date: February 24, 2007 (last updated October 04, 2023)
Scriptsez.net E-Dating System stores data files with predictable names under the web document root with insufficient access control, which allows remote attackers to read private messages and leverage them for cross-site scripting (XSS) attacks.
0
Attacker Value
Unknown
CVE-2007-0952
Disclosure Date: February 15, 2007 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Virtual Calendar allow remote attackers to inject arbitrary web script or HTML via the (1) t and (2) yr parameters, and the (3) sho parameter when the m parameter is outside the intended range.
0
Attacker Value
Unknown
CVE-2007-0518
Disclosure Date: January 26, 2007 (last updated October 04, 2023)
Scriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain encoded passwords via a direct request for pwd.txt.
0
Attacker Value
Unknown
CVE-2007-0517
Disclosure Date: January 26, 2007 (last updated October 04, 2023)
Scriptsez Random PHP Quote 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password information via a direct request for pwd.txt.
0
Attacker Value
Unknown
CVE-2006-3004
Disclosure Date: June 13, 2006 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in player.php and (2) keyword parameter when performing a search.
0
Attacker Value
Unknown
CVE-2006-2232
Disclosure Date: May 05, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Scriptsez Cute Guestbook 20060211 allows remote attackers to inject arbitrary web script or HTML via the Comments field when signing the guestbook.
0
