NSA Group Security Advisory NSAG-№196-23.02.2006 Vulnerability FCKeditor 2.2

Advisory: NSAG-№196-23.02.2006 Research: NSA Group Russian company on Audit of safety & Network security Site of Research: http://www.nsag.ru or http://www.nsag.org Product: FCKeditor 2.2 Site of manufacturer: http://www.fckeditor.net The status: 19/11/2005 - Publication is postponed. 19/11/2005 ...

CVE-2006-0155

CVE-2006-0155 describes a cross-site scripting (XSS) flaw in the 427BB web app, specifically in posts.php across versions 2.2 and 2.2.1. The issue arises when a user submits a new message that uses a url BBCode tag containing a javascript URI, allowing remote attackers to inject arbitrary JavaScr...

CVE-2006-0154

The CVE-2006-0154 issue affects the 427BB software (versions 2.2 and 2.2.1) in the showthread.php component, where the ForumID parameter causes a SQL injection vulnerability. The root cause is an unvalidated input path in the showthread.php handler, allowing remote attackers to execute arbitrary ...

CVE-2006-0155

Cross-site scripting XSS vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrary Javascript via a new message with a url bbcode tag containing a javascript URI...

427BB 2.2 - Authentication Bypass

427BB 2.2 - Authentication Bypass source: https://www.securityfocus.com/bid/16178/info 427BB is prone to an authentication bypass vulnerability. This issue is due to a failure in the application to properly validate user-supplied data. An attacker can exploit this issue to bypass the authenticati...

427BB 2.2 - showthread.php SQL Injection

427BB 2.2 - showthread.php SQL Injection source: https://www.securityfocus.com/bid/16169/info 427BB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

ag22sql.txt

In GOD We Trust; Kachal667 Under9round Team KuT new exploit with HTML for Advanced Guestbook 2.2 . This bug found by BHST. Coded By Hessam-x Note : For use this exploit first change target to victim example : www.targetsite.com/guestbook/admin.php =====HTML CODE : GuestBook 2.2 exploit Guest Book...

exploit (html) for Advanced Guestbook 2.2

In GOD We Trust; Kachal667 Under9round Team KuT new exploit with HTML for Advanced Guestbook 2.2 . This bug found by BHST. Coded By Hessam-x Note : For use this exploit first change target to victim example : www.targetsite.com/guestbook/admin.php =====HTML CODE : html titleGuestBook 2.2...

CVE-2005-4252

CVE-2005-4252 describes a cross-site scripting (XSS) vulnerability in mcGallery PRO 2.2 and earlier . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters of the search module. The NVD entry records a CVSS v2 base score of 4.3 (Medium) with attack ve...

CVE-2005-4088

CVE-2005-4088 describes an SQL injection vulnerability in index.php of phpForumPro 2.2 that allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters. The issue affects phpForumPro 2.2 and is documented with a CVSSv2 base score of 7.5 (HIGH). Exploitation...

CVE-2005-3588

SQL injection vulnerability in admin.php in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the username field...

CVE-2005-3588

The CVE-2005-3588 entry describes an SQL injection in Advanced Guestbook 2.2, exploitable via the username field in admin.php. The vulnerability is remote and allows execution of arbitrary SQL commands and privilege escalation. Documents indicate affected software is Advanced Guestbook 2.2; no sp...

CVE-2005-3588

SQL injection vulnerability in admin.php in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the username field...

guestbook-2.2.txt

Guestbook 2.2 webapplication PHP, MySQL appears vulnerable to SQL Injection granting the attacker administrator access. Target : http://www.example.com/GuestbookTarget/admin.php Username: ' or 1=1 / Password: NothingBlank Its Working On Advanced Guestbook 2.2 version 2.3.1 will fix this...

Advanced Guestbook 2.2 ( SQL Injection Exploit )

Guestbook 2.2 webapplication PHP, MySQL appears vulnerable to SQL Injection granting the attacker administrator access. Target : http://www.example.com/GuestbookTarget/admin.php Username: ' or 1=1 / Password: NothingBlank Its Working On Advanced Guestbook 2.2 version 2.3.1 will fix this...

Fedora Core 3 : texinfo-4.8-2.2 (2005-990)

This package fixes a temporary file name vulnerability in the texindex program CVE-2005-3011. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Calendar Express 2.2 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14505/info Calendar Express is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

EUVD-2005-2331

Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via 1 .. sequences or 2 a full pathname in the readmefile parameter...

CVE-2005-2330

CVE-2005-2330 describes a directory-traversal flaw in osCommerce 2.2, specifically in the extras/update.php script. A remote attacker can exploit the readme_file parameter by using ".." sequences or a full pathname to read arbitrary files on the server. Impact is described as the ability to acces...

osCommerce 2.2 - update.php Information Disclosure

osCommerce 2.2 - update.php Information Disclosure source: https://www.securityfocus.com/bid/14294/info osCommerce is prone to an information-disclosure vulnerability. An attacker could exploit this vulnerability to display the contents of any file normally readable by the webserver process...