Show filters
95 Total Results
Displaying 91-95 of 95
Sort by:
Attacker Value
Unknown
CVE-2008-6435
Disclosure Date: March 06, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) lang[home], (2) lang[admin_menu], and (3) lang[admin_menu_page_overview] parameters to cms/includes/header.inc.php; and the (4) lang[login_username] and (5) lang[login_password] parameters to cms/includes/login.inc.php.
0
Attacker Value
Unknown
CVE-2008-0516
Disclosure Date: January 31, 2008 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2007-1231
Disclosure Date: March 03, 2007 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) database name, (2) table name, (3) ViewName, (4) view, (5) trigger, and (6) function fields in main.php and certain other files.
0
Attacker Value
Unknown
CVE-2007-1232
Disclosure Date: March 03, 2007 (last updated October 04, 2023)
Directory traversal vulnerability in SQLiteManager 1.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in a SQLiteManager_currentTheme cookie.
0
Attacker Value
Unknown
CVE-2006-4102
Disclosure Date: August 14, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in tpl.inc.php in Falko Timme and Till Brehm SQLiteWebAdmin 0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the conf[classpath] parameter.
0
