296 matches found
Clever Copy <=3.0 Multiple Remote Vulnerabilities
...:::::Clever Copy v3.0 Multiple Remote Vulnerabilities::::.... sql injection/xss Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : virangar security teamhadihadi --------------------------------- special tnx to:MR.nosrati,MR.hesy,satan,Zahra & my lovely friend ara...
Sql injection
Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to postcomment.php and the 2 album parameter to gallery.php...
Cross site scripting
Cross-site scripting XSS vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the album parameter...
CVE-2008-0362
Cross-site scripting XSS vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the album parameter...
CVE-2008-0363
Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to postcomment.php and the 2 album parameter to gallery.php...
CVE-2008-0363
CVE-2008-0363 affects Clever Copy 3.0 and earlier. The vulnerability is a SQL injection in the web app, exploitable via the ID parameter to postcomment.php and the album parameter to gallery.php, allowing remote command execution on the backend database. Root cause is improper input handling that...
CVE-2008-0363
Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to postcomment.php and the 2 album parameter to gallery.php...
CVE-2008-0362
Cross-site scripting XSS vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the album parameter...
CVE-2008-0362
The CVE-2008-0362 entry describes a Cross-Site Scripting (XSS) vulnerability in Clever Copy versions up to 3.0, specifically in gallery.php. The flaw allows remote attackers to inject arbitrary web script or HTML through the album parameter. Affected software is the Clever Copy gallery implementa...
CVE-2008-0363: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to postcomment.php and the 2 album parameter to gallery.php...
CVE-2008-0362: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the album parameter...
Clever Copy 3.0 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities
Clever Copy 3.0 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27335/info Clever Copy is prone to multiple input-validation vulnerabilities, including two SQL-injection issues and a cross-site scripting issue, because it fails to...
Clever Copy 3.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/27335/info Clever Copy is prone to multiple input-validation vulnerabilities, including two SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacke...
Unfixed XSS vulnerability at www.cleverwebservices.com
Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting www.cleverwebservices.com, which at the time of submission ranked 16662648 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Path traversal
Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these...
CVE-2007-4067
Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these...
CVE-2007-4067
Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these...
CVE-2007-4067
CVE-2007-4067 : An absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control (CLINETSUITEX6.OCX) of Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname passed as the second argument to the GetToFile method....
CVE-2007-4067: Undefined Security Weakness
Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these...
