Expinion.net News Manager Lite 2.5 - 'comment_add.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the 'commentadd.asp', 'search.asp',...

Expinion.net News Manager Lite 2.5 - 'category_news_headline.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9935/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out SQL injection, cross-site scripting, and account hijacking attacks. The issues exist in the 'commentadd.asp', 'search.asp',...

Multiple Vulnerabilities in PHPX

Title: Multiple Vulnerabilities in PHPX By: Manuel Lpez [email protected] FROM IST libres.irc-hispano.org, IST Efnet. Url: http://www.phpx.org Description: PHPX is a web portal system, blog, Content Management System CMS, forums, and more. PHPX is designed to allow everyone to be able to have...

PHPX 3.2.3 - Multiple Vulnerabilities

PHPX 3.2.3 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/9569/info Multiple vulnerabilities were reported in PHPX. The specific issues include cross-site scripting, HTML injection and account hijacking via specially crafted cookies. These issues were reported to exist in PH...

PHPX 3.2.3 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/9569/info Multiple vulnerabilities were reported in PHPX. The specific issues include cross-site scripting, HTML injection and account hijacking via specially crafted cookies. These issues were reported to exist in PHPX 3.2.3. Earlier versions are also...

CVE-2003-1350

List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" pipe, which is used as a field delimiter, into the bannerurl field...

Multiple Vulnerabilities In ASPapp Products

Vendor : ASPapp.com URL : http://www.aspapp.com Version : PortalApp - IntranetApp - ProjectApp Risk : Multiple Vulnerabilities Description: A complete, easy-to-modify .asp portal system. With this portal you can manage users, content, links, files, forums, surveys, product catalog, shopping cart,...

ASPapp Multiple Products - Multiple Vulnerabilities

ASPapp Multiple Products - Multiple Vulnerabilities ASPapp Multiple Vulnerabilities Vendor: ASPapp.com Product: ASPapp Version: Multple Products Website: http://www.aspapp.com/ BID: 9250 Description: A complete, easy-to-modify .asp portal system. With this portal you can manage users, content,...

ASPapp Multiple Products - Multiple Vulnerabilities

ASPapp Multiple Vulnerabilities Vendor: ASPapp.com Product: ASPapp Version: Multple Products Website: http://www.aspapp.com/ BID: 9250 Description: A complete, easy-to-modify .asp portal system. With this portal you can manage users, content, links, files, forums, surveys, product catalog, shoppi...

Multiple DUWare Product Vulnerabilities

Vendor : DUWare URL : http://www.duware.com Version : DU Portal 3.0 / Multiple DUWare Products Risk : High / Multiple Vulnerabilities Description: DUportal Pro is a professional Web portal and online community. DUportal Pro contains numerous advanced features such as Web-based administration,...

DUWare Multiple Products - Multiple Vulnerabilities

DUWare Multiple Products - Multiple Vulnerabilities DUWare Multiple Vulnerabilities Vendor: DUWare Product: DUWare Version: Multiple Products Website: http://www.duware.com/ BID: 9246 Description: DUportal Pro is a professional Web portal and online community. DUportal Pro contains numerous...

DUWare Multiple Products - Multiple Vulnerabilities

DUWare Multiple Vulnerabilities Vendor: DUWare Product: DUWare Version: Multiple Products Website: http://www.duware.com/ BID: 9246 Description: DUportal Pro is a professional Web portal and online community. DUportal Pro contains numerous advanced features such as Web-based administration,...

Microsoft ISA Server HTTP error handler XSS (TL#007)

Thor Larholm security advisory TL006 ------------------------------------- 16 July 2003 HTML format: http://pivx.com/larholm/adv/TL006 Topic: ISA Server HTTP error handler XSS. Discovery date: 25 June 2002. Severity: Medium Affected applications: ---------------------- Any Microsoft Internet...

XOOPS MyTextSanitizer CSS 1.3x & 2.x

Author: Doxical & Magistrat http://www.blocus-zone.com Date: 25/04/2003 Object: XOOPS MyTextSanitizer Filtering Bug Allows Remote Users to Conduct Cross-Site Scripting Attacks in many modules: News, newbb, private messages, signatures etc... Impact: Disclosure of authentication information,...

List Site Pro v2 user account Hijacking vulnerablity

List Site Pro v2 user account Hijacking vulnerablity Severity:Low homepage:http://www.listsitepro.com It is possible to take over another user account by signing up and using | in one of the required feilds. List Site Pro uses '|' to delimit the database but the form input is not checked and...

Cyboards Remote Code Execution

Cyboards PHP Lite Vulnerability By Mindwarper :: [email protected] :: ------- ------- ---------------------- Vendor Information: ---------------------- Homepage : http://www.gold-sonata.com Vendor : informed Mailed advisory: 13/01/03 Vender Response : None yet possibly because they have no...

New Vulnerability on YaBB 1.4.0 and YaBB 1.4.1 forums

Two security vulnerabilities in YaBB allows stealing users cookies and hijacking users accounts. Tested on: YaBB 1.40 & 1.41 Summary : YaBB is a leading provider of free, downloadable php forums for webmasters. Two security vulnerabilities in the product allows a remote attacker to steal users...

CVE-2002-0903

register.php for WoltLab Burning Board wbboard 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack...

CVE-2002-0903

register.php for WoltLab Burning Board wbboard 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack...

CVE-2002-0903: Undefined Security Weakness

register.php for WoltLab Burning Board wbboard 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack...