Show filters
44 Total Results
Displaying 31-40 of 44
Sort by:
Attacker Value
Unknown
CVE-2008-2878
Disclosure Date: June 26, 2008 (last updated October 04, 2023)
Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter.
0
Attacker Value
Unknown
CVE-2007-1247
Disclosure Date: March 03, 2007 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in aWeb Labs aWebNews 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the path_to_news parameter to (1) listing.php or (2) visview.php.
0
Attacker Value
Unknown
CVE-2006-4719
Disclosure Date: September 12, 2006 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to (1) index.php or (2) pop.php.
0
Attacker Value
Unknown
CVE-2006-1699
Disclosure Date: April 11, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode.
0
Attacker Value
Unknown
CVE-2006-1700
Disclosure Date: April 11, 2006 (last updated October 04, 2023)
Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote attackers to bypass authentication.
0
Attacker Value
Unknown
CVE-2006-1638
Disclosure Date: April 06, 2006 (last updated February 22, 2025)
Multiple SQL injection vulnerabilities in aWebBB 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) Username parameter to (a) accounts.php, (b) changep.php, (c) editac.php, (d) feedback.php, (e) fpass.php, (f) login.php, (g) post.php, (h) reply.php, or (i) reply_log.php; (2) p parameter to (j) dpost.php; (3) c parameter to (k) list.php or (l) ndis.php; or (12) q parameter to (m) search.php.
0
Attacker Value
Unknown
CVE-2006-1637
Disclosure Date: April 06, 2006 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) tname or (2) fpost parameters to (a) post.php; (3) fullname, (4) emailadd, (5) country, (6) sig, or (7) otherav parameters to (b) editac.php; or (8) fullname, (9) emailadd, or (10) country parameters to (c) register.php.
0
Attacker Value
Unknown
CVE-2006-1612
Disclosure Date: April 04, 2006 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in visview.php in aWebNews 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) yname, (2) emailadd, (3) subject, and (4) comment parameters.
0
Attacker Value
Unknown
CVE-2006-1613
Disclosure Date: April 04, 2006 (last updated February 22, 2025)
Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user123 variable in (a) login.php or (b) fpass.php; or (2) cid parameter to (c) visview.php.
0
Attacker Value
Unknown
CVE-2005-4287
Disclosure Date: December 16, 2005 (last updated February 22, 2025)
PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the page parameter to index.php.
0
