Cross-site request forgery (CSRF) vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action.

Last Modified: Apr 11, 2025

Published: Oct 08, 2012

CVE-2012-1779

Cross-site scripting (XSS) vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter to index.php.

Last Modified: Apr 11, 2025

Published: Mar 19, 2012

CVE-2011-3779

PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/create_acct.php and certain other files.

Last Modified: Apr 11, 2025

Published: Sep 24, 2011

CVE-2010-2319

SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter.

Last Modified: Apr 11, 2025

Published: Jun 17, 2010

CVE-2009-4425

Cross-site scripting (XSS) vulnerability in index.php in iDevCart 1.09 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter in a browse action.

Last Modified: Apr 23, 2026

Published: Dec 28, 2009

Items Per Page