PHProfession 2.5 - 'modules.php?jcode' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10190/info Multiple vulnerabilities were reported to exist in phProfession, which is a third-party module for PostNuke. Path disclosure, cross-site scripting and SQL injection vulnerabilities were reported. Exploitation of these issues may reveal sensitiv...

PHProfession 2.5 - modules.php?jcode Cross-Site Scripting

PHProfession 2.5 - modules.php?jcode Cross-Site Scripting source: https://www.securityfocus.com/bid/10190/info Multiple vulnerabilities were reported to exist in phProfession, which is a third-party module for PostNuke. Path disclosure, cross-site scripting and SQL injection vulnerabilities were...

PHProfession 2.5 - 'upload.php' Direct Request Full Path Disclosure

source: https://www.securityfocus.com/bid/10190/info Multiple vulnerabilities were reported to exist in phProfession, which is a third-party module for PostNuke. Path disclosure, cross-site scripting and SQL injection vulnerabilities were reported. Exploitation of these issues may reveal sensitiv...

[Full-Disclosure] Blogger XSS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------ BLOGGER XSS VULNERABILITY - ------------------------------------------------------ Online URL : http://ferruh.mavituna.com/article/?470 Severity : Moderately Critical for Members Permanent Accou...

Expinion.net News Manager Lite 2.5 - more.asp?ID SQL Injection

Expinion.net News Manager Lite 2.5 - more.asp?ID SQL Injection source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issue...

Expinion.net News Manager Lite 2.5 - news_sort.asp?filter SQL Injection

Expinion.net News Manager Lite 2.5 - newssort.asp?filter SQL Injection source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. T...

Expinion.net News Manager Lite 2.5 - search.asp Cross-Site Scripting

Expinion.net News Manager Lite 2.5 - search.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The...

Expinion.net News Manager Lite 2.5 - 'news_sort.asp?filter' SQL Injection

source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the 'commentadd.asp', 'search.asp',...

Expinion.net News Manager Lite 2.5 - 'more.asp?ID' SQL Injection

source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the 'commentadd.asp', 'search.asp',...

Expinion.net News Manager Lite 2.5 - 'category_news_headline.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the 'commentadd.asp', 'search.asp',...

Expinion.net News Manager Lite 2.5 - 'comment_add.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the 'commentadd.asp', 'search.asp',...

Expinion.net News Manager Lite 2.5 - 'NEWS_LOGIN?admin' Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the 'commentadd.asp', 'search.asp',...

Expinion.net News Manager Lite 2.5 - 'search.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the 'commentadd.asp', 'search.asp',...

Expinion.net News Manager Lite 2.5 - NEWS_LOGIN?admin Cookie Authentication Bypass

Expinion.net News Manager Lite 2.5 - NEWSLOGIN?admin Cookie Authentication Bypass source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking...

Expinion.net News Manager Lite 2.5 - category_news.asp?ID SQL Injection

Expinion.net News Manager Lite 2.5 - categorynews.asp?ID SQL Injection source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. T...

Expinion.net News Manager Lite 2.5 - category_news_headline.asp Cross-Site Scripting

Expinion.net News Manager Lite 2.5 - categorynewsheadline.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijackin...

Expinion.net News Manager Lite 2.5 - comment_add.asp Cross-Site Scripting

Expinion.net News Manager Lite 2.5 - commentadd.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks...

Expinion.net News Manager Lite 2.5 - 'category_news.asp?ID' SQL Injection

source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the 'commentadd.asp', 'search.asp',...

Multiple Vulnerabilities in PHPX

Title: Multiple Vulnerabilities in PHPX By: Manuel Lpez [email protected] FROM IST libres.irc-hispano.org, IST Efnet. Url: http://www.phpx.org Description: PHPX is a web portal system, blog, Content Management System CMS, forums, and more. PHPX is designed to allow everyone to be able to have...

PHPX 3.2.3 - Multiple Vulnerabilities

PHPX 3.2.3 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/9569/info Multiple vulnerabilities were reported in PHPX. The specific issues include cross-site scripting, HTML injection and account hijacking via specially crafted cookies. These issues were reported to exist in PH...