CVE-2006-6479: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the email parameter in 1 erreurinscription.php, 2 Templates/admin.dwt.php, 3 Templates/commun.dwt.php, 4 membre.dwt.php, and 5 admin/adminconfig/Aide.php...

ashp20.txt

AnnonceScriptHP V2.0 -------------------- Vendor site: http://www.scripthp.com/ Product: AnnonceScriptHP V2.0 Vulnerability: XSS & SQL Injection Vulnerability Credits: MrKaLiMaN Reported to Vendor: 02/12/06 Public disclosure: 09/12/06 Description: ------------ Password disclosure all members:...

AnnonceScriptHP V2.0 Multiple Vulnerabilities

AnnonceScriptHP V2.0 -------------------- Vendor site: http://www.scripthp.com/ Product: AnnonceScriptHP V2.0 Vulnerability: XSS & SQL Injection Vulnerability Credits: MrKaLiMaN Reported to Vendor: 02/12/06 Public disclosure: 09/12/06 Description: ------------ Password disclosure all members:...

AnnonceScriptHP 2.0 - erreurinscription.php?email Cross-Site Scripting

AnnonceScriptHP 2.0 - erreurinscription.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize...

AnnonceScriptHP 2.0 - adminadmin_configAide.php?email Cross-Site Scripting

AnnonceScriptHP 2.0 - adminadminconfigAide.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize...

AnnonceScriptHP 2.0 - '/admin/admin_config/Aide.php?email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to ste...

AnnonceScriptHP 2.0 - '/Templates/admin.dwt.php?email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to ste...

AnnonceScriptHP 2.0 - 'erreurinscription.php?email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to ste...

AnnonceScriptHP 2.0 - 'membre.dwt.php?email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to ste...

AnnonceScriptHP 2.0 - '/Templates/commun.dwt.php?email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to ste...

AnnonceScriptHP 2.0 - 'email.php?id' SQL Injection

source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to ste...

AnnonceScriptHP 2.0 - Templatesadmin.dwt.php?email Cross-Site Scripting

AnnonceScriptHP 2.0 - Templatesadmin.dwt.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize...

AnnonceScriptHP 2.0 - '/admin/admin_membre/fiche_membre.php?idmembre' SQL Injection

source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to ste...

AnnonceScriptHP 2.0 - 'voirannonce.php?no' SQL Injection

source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to ste...

AnnonceScriptHP 2.0 - adminadmin_membrefiche_membre.php?idmembre SQL Injection

AnnonceScriptHP 2.0 - adminadminmembrefichemembre.php?idmembre SQL Injection source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently saniti...

AnnonceScriptHP 2.0 - Templatescommun.dwt.php?email Cross-Site Scripting

AnnonceScriptHP 2.0 - Templatescommun.dwt.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize...

AnnonceScriptHP 2.0 - membre.dwt.php?email Cross-Site Scripting

AnnonceScriptHP 2.0 - membre.dwt.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize...

AnnonceScriptHP 2.0 - voirannonce.php?no SQL Injection

AnnonceScriptHP 2.0 - voirannonce.php?no SQL Injection source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...