EUVD-2006-6462

Malware in sbrugna...

EUVD-2006-6463

Malware in sbrugna...

EUVD-2006-6461

Malware in sbrugna...

AnnonceScriptHP 2.0 membre.dwt.php email Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

AnnonceScriptHP 2.0 Templates/commun.dwt.php email Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

AnnonceScriptHP 2.0 admin/admin_config/Aide.php email Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

AnnonceScriptHP 2.0 Templates/admin.dwt.php email Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

AnnonceScriptHP 2.0 email.php id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

AnnonceScriptHP 2.0 admin/admin_membre/fiche_membre.php idmembre Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

AnnonceScriptHP 2.0 voirannonce.php no Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

AnnonceScriptHP 2.0 erreurinscription.php email Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

CVE-2006-6479

Multiple cross-site scripting XSS vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the email parameter in 1 erreurinscription.php, 2 Templates/admin.dwt.php, 3 Templates/commun.dwt.php, 4 membre.dwt.php, and 5 admin/adminconfig/Aide.php...

CVE-2006-6478

Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a email.php, the 2 no parameter in b voirannonce.php, the 3 idmembre parameter in c admin/adminmembre/fichemembre.php, and the 4 idannonce parameter in ...

CVE-2006-6480: Undefined Security Weakness

admin/adminmembre/fichemembre.php in AnnonceScriptHP 2.0 allows remote attackers to obtain sensitive information via the idmembre parameter, which discloses the passwords for arbitrary users...

CVE-2006-6480

admin/adminmembre/fichemembre.php in AnnonceScriptHP 2.0 allows remote attackers to obtain sensitive information via the idmembre parameter, which discloses the passwords for arbitrary users...

CVE-2006-6480

CVE-2006-6480 affects AnnonceScriptHP 2.0. The vulnerability is in admin/admin_membre/fiche_membre.php, where the idmembre parameter allows remote attackers to obtain sensitive information, specifically passwords for arbitrary users. The provided sources confirm the affected component and the dat...

CVE-2006-6478: Undefined Security Weakness

Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a email.php, the 2 no parameter in b voirannonce.php, the 3 idmembre parameter in c admin/adminmembre/fichemembre.php, and the 4 idannonce parameter in ...

CVE-2006-6478

CVE-2006-6478 describes multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0. The affected components are (a) email.php (id parameter), (b) voirannonce.php (no parameter), (c) admin/admin_membre/fiche_membre.php (idmembre), and (d) admin/admin_annonce/okvalannonce.php and (e) admin/admin...

CVE-2006-6478

Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a email.php, the 2 no parameter in b voirannonce.php, the 3 idmembre parameter in c admin/adminmembre/fichemembre.php, and the 4 idannonce parameter in ...

CVE-2006-6479

CVE-2006-6479 documents multiple XSS flaws in AnnonceScriptHP 2.0, allowing remote attackers to inject arbitrary script or HTML via the email parameter. Affected files are: erreurinscription.php, Templates/admin.dwt.php, Templates/commun.dwt.php, membre.dwt.php, and admin/admin_config/Aide.php. T...