Aigaion 1.2.1 - DIR Remote File Inclusion

Aigaion 1.2.1 - DIR Remote File Inclusion Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

Aigaion 1.2.1 - 'DIR' Remote File Inclusion

Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

CVE-2006-4109

Cross-site scripting XSS vulnerability in Bibliography biblio.module 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-4108

SQL injection vulnerability in Bibliography biblio.module 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-4109

Cross-site scripting XSS vulnerability in Bibliography biblio.module 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-4109

CVE-2006-4109 affects Drupal’s Bibliography (biblio.module) versions 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5. The vulnerability is a cross-site scripting (XSS) flaw allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Documents descri...

CVE-2006-4108

The CVE-2006-4108 entry describes a SQL injection vulnerability in Drupal’s Bibliography (biblio.module). Affected are Drupal modules versions 4.6 prior to revision 1.1.1.1.4.11 and 4.7 prior to revision 1.13.2.5, where an attacker can remotely execute arbitrary SQL commands via unspecified vecto...

CVE-2006-4108

SQL injection vulnerability in Bibliography biblio.module 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-4108: Undefined Security Weakness

SQL injection vulnerability in Bibliography biblio.module 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-4109: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Bibliography biblio.module 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

[SA21435] Drupal Bibliography Module Cross-Site Scripting and SQL Injection

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

DRUPAL-SA-2006-015: Multiple vulnerabilities in Bibliography

Unescaped input is used directly in queries, allowing malicious users to execute SQL injection attacks. This may result in administrator access. It is also possible for a malicious user to insert and execute XSS Cross Site Scripting, due to lack of validation on output. This may lead to...