Facebook Helps FBI to shuts down Butterfly botnet theft $850 millions

The U.S. Department of Justice said on Tuesday that they’ve arrested 10 suspects from from Bosnia and Herzegovina, Croatia, Macedonia, New Zealand, Peru, the United Kingdom, and the United States involved in a global botnet operation that infected more than 11 million systems. The ring is said to...

CVE-2008-7181

Butterfly Organizer 2.0.0 allows remote attackers to 1 delete arbitrary categories via a modified tablehere parameter to category-delete.php with the isjsconfirmed parameter set to 1, or 2 delete arbitrary accounts via the mytable parameter to delete.php...

Code injection

Butterfly Organizer 2.0.0 allows remote attackers to 1 delete arbitrary categories via a modified tablehere parameter to category-delete.php with the isjsconfirmed parameter set to 1, or 2 delete arbitrary accounts via the mytable parameter to delete.php...

CVE-2008-7181

CVE-2008-7181 affects Butterfly Organizer 2.0.0. The vulnerability lets remote attackers delete data by manipulating parameters: (1) tablehere with is_js_confirmed=1 to category-delete.php, and (2) mytable to delete.php, enabling arbitrary category/account deletion. The connected documents confir...

CVE-2008-7181

Butterfly Organizer 2.0.0 allows remote attackers to 1 delete arbitrary categories via a modified tablehere parameter to category-delete.php with the isjsconfirmed parameter set to 1, or 2 delete arbitrary accounts via the mytable parameter to delete.php...

CVE-2008-6700

Multiple cross-site scripting XSS vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 mytable parameter to view.php, 2 mytable parameter to viewdb2.php, 3 tablehere parameter to category-rename.php, and 4 letter parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 mytable parameter to view.php, 2 mytable parameter to viewdb2.php, 3 tablehere parameter to category-rename.php, and 4 letter parameter to...

CVE-2008-6700

Multiple cross-site scripting XSS vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 mytable parameter to view.php, 2 mytable parameter to viewdb2.php, 3 tablehere parameter to category-rename.php, and 4 letter parameter to...

CVE-2008-6700

CVE-2008-6700 describes multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0. The flaws allow remote attackers to inject arbitrary web script or HTML via specific parameters: (1) mytable to view.php, (2) mytable to viewdb2.php, (3) tablehere to category-rename.php, and...

Butterfly Organizer Multiple SQL Injection and Cross-Site Scripting Vulnerabilities

Butterfly Organizer is prone to multiple cross-site scripting and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application...

CVE-2008-6311

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE: the id vector is covered by another CVE name...

CVE-2008-6328

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE: the id vector is covered by another CVE name...

CVE-2008-6311

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE: the id vector is covered by another CVE name...

CVE-2008-6311

The vulnerability CVE-2008-6311 affects Butterfly Organizer 2.0.1 via the view.php file, where the mytable parameter is vulnerable to SQL injection. This allows remote attackers to execute arbitrary SQL commands, with the impact described as enabling database operations beyond intended access. Th...

CVE-2008-6328

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6328

Butterfly Organizer is affected by CVE-2008-6328: an SQL injection in view.php via the id parameter could allow remote execution of arbitrary SQL commands. Affected versions include 2.0.0 and 2.0.1. OpenVAS details also describe additional input-sanitization vulnerabilities (XSS) in the same prod...

Butterfly Organizer 2.0.1 (view.php id) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Name : Butterfly Organizer 2.0.1 Sql Injection Download : http://www.hotscripts.com/jump.php?listingid=72677&jumptype=1 Vulnerability : Remote Sql Injection Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian : Same bug of...

Butterfly ORGanizer 2.0.1 - 'id' SQL Injection

0x01 Informations: Name : Butterfly Organizer 2.0.1 Sql Injection Download : http://www.hotscripts.com/jump.php?listingid=72677&jumptype=1 Vulnerability : Remote Sql Injection Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian : Same bug of the previous version:...