CVE-2008-5199 | | | 2008-11-21 | PHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox (aka IdeBox) 1.1 allows remote attackers to execute arbitrary PHP code via a U… |
CVE-2006-5431 | | | 2006-10-20 | PHP remote file inclusion vulnerability in gorum/dbproperty.php in PHPOutsourcing Zorum 3.5 and earlier allows remote attackers to execute arbitrary PHP code v… |
CVE-2006-5293 | | | 2006-10-16 | Cross-site scripting (XSS) vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web scri… |
CVE-2006-3333 | | | 2006-06-30 | Cross-site scripting (XSS) vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to inject web script or HTML via the multiple unspecified para… |
CVE-2006-3332 | | | 2006-06-30 | SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid… |
CVE-2006-1332 | | | 2006-03-21 | Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php… |
CVE-2006-1331 | | | 2006-03-21 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or… |
CVE-2006-0882 | | | 2006-02-24 | Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemplate param… |
CVE-2006-0881 | | | 2006-02-24 | Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals is enabled, allow remote attackers to i… |
CVE-2006-0880 | | | 2006-02-24 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inject arbitrary web script or HTML via th… |
CVE-2006-0879 | | | 2006-02-24 | SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQL commands via unspecified attack vecto… |
CVE-2006-0878 | | | 2006-02-24 | Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, as demonstrated by classifieds/gorum/cate… |
CVE-2005-4619 | | | 2005-12-31 | SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid… |
CVE-2005-2980 | | | 2005-09-20 | Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers to inject arbitrary web script or HTML v… |
CVE-2005-2979 | | | 2005-09-20 | SQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote attackers to execute arbitrary SQL commands via the rollid paramete… |
CVE-2005-2652 | | | 2005-08-23 | Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php, (3) attach.php, (4) bla… |
CVE-2005-2651 | | | 2005-08-23 | gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter. |
CVE-2005-0676 | | | 2005-05-04 | index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability. |
CVE-2005-0677 | | | 2005-05-02 | index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter. |
CVE-2005-0675 | | | 2005-05-02 | Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2) from… |
CVE-2003-1089 | | | 2003-12-31 | index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a PHP error m… |
CVE-2003-1088 | | | 2003-08-11 | Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method param… |
CVE-2002-2350 | | | 2002-12-31 | Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject arbitrary web scrip… |