EUVD-2015-4742

Malware in sbrugna...

EUVD-2015-4743

Malware in sbrugna...

AudioShare Code Injection Vulnerability

AudioShare is an audio file manager. AudioShare suffers from a code injection vulnerability that allows remote attackers to execute arbitrary PHP code by submitting a special 'config'basedir' ' parameter...

CVE-2015-4726

PHP remote file inclusion vulnerability in ajax/myajaxphp.php in AudioShare 2.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the config'basedir' parameter...

CVE-2015-4725

Cross-site scripting XSS vulnerability in forgot.php in AudioShare 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in forgot.php in AudioShare 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2015-4725

Cross-site scripting XSS vulnerability in forgot.php in AudioShare 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2015-4726

PHP remote file inclusion vulnerability in ajax/myajaxphp.php in AudioShare 2.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the config'basedir' parameter...

CVE-2015-4725

AudioShare 2.0.2 is affected by a Cross-site Scripting (XSS) in forgot.php, exploitable via the email parameter. The vulnerability allows remote attackers to inject arbitrary script/HTML when user-provided data is rendered, enabling potential session hijacking or information disclosure as describ...

CVE-2015-4726

AudioShare 2.0.2 is affected by a PHP remote file inclusion in ajax/myajaxphp.php that allows remote attackers to execute arbitrary PHP code via a URL supplied in the config['basedir'] parameter. Root cause appears to be improper handling of config['basedir'], enabling RFI. Severity from referenc...

CVE-2015-4725: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in forgot.php in AudioShare 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

PT-2015-6677

Name of the Vulnerable Software and Affected Versions AudioShare version 2.0.2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the email parameter in the forgot.php file...

PT-2015-6678

Name of the Vulnerable Software and Affected Versions AudioShare version 2.0.2 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the config'basedir' parameter in the ajax/myajaxphp.php file. Recommendations For AudioShare version 2.0.2, consider restricting...

CVE-2015-4726: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in ajax/myajaxphp.php in AudioShare 2.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the config'basedir' parameter...