EUVD-2010-1136

Malware in sbrugna...

Advertisement Manager v3.1.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ===================================================== Advertisement Manager v3.1.0 Multiple Vulnerabilities ===================================================== ===========================================================================...

Cross site scripting

Cross-site scripting XSS vulnerability in cgi/index.php in AdvertisementManager 3.1.0 and 3.6 allows remote attackers to inject arbitrary web script or HTML via the usr parameter...

CVE-2010-1105

Cross-site scripting XSS vulnerability in cgi/index.php in AdvertisementManager 3.1.0 and 3.6 allows remote attackers to inject arbitrary web script or HTML via the usr parameter...

CVE-2010-1106

PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the req parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2010-1105

Cross-site scripting XSS vulnerability in cgi/index.php in AdvertisementManager 3.1.0 and 3.6 allows remote attackers to inject arbitrary web script or HTML via the usr parameter...

CVE-2010-1106

PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the req parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2010-1105

CVE-2010‑1105 is an XSS vulnerability affecting AdvertisementManager 3.1.0 and 3.6 in the CGI path cgi/index.php, exploitable via the usr parameter. The issue is confirmed across multiple sources (NVD and CVE records) with a base CVSS2 score of 4.3 (MEDIUM) and no exploitation details provided in...

CVE-2010-1106

CVE-2010-1106 pertains to a PHP remote file inclusion in AdvertisementManager 3.1.0, specifically in cgi/index.php. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL in the req parameter, with an additional note that local files can be included via .. (dot dot)...

CVE-2010-1105: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi/index.php in AdvertisementManager 3.1.0 and 3.6 allows remote attackers to inject arbitrary web script or HTML via the usr parameter...

CVE-2010-1106: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the req parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

AdvertisementManager 3.1 - req LocalRemote File Inclusion

AdvertisementManager 3.1 - req LocalRemote File Inclusion source: https://www.securityfocus.com/bid/44165/info AdvertisementManager is prone to local and remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may all...

AdvertisementManager 3.1 - 'req' Local/Remote File Inclusion

source: https://www.securityfocus.com/bid/44165/info AdvertisementManager is prone to local and remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or...