CVE-2006-1718

Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to view the database username and password via a direct request for connect.inc...

CVE-2006-1718

CVE-2006-1718 affects Magus Perde Clever Copy 3.0 and earlier. The application stores database credentials under the web root and does not enforce access control for connect.inc, allowing an unauthenticated remote attacker to view the file contents via a direct HTTP request. This information disc...

CVE-2006-1718: Undefined Security Weakness

Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to view the database username and password via a direct request for connect.inc...

Clever Copy 3.0 - 'Connect.INC' Information Disclosure

source: https://www.securityfocus.com/bid/17461/info Clever Copy is prone to an information-disclosure vulnerability. A remote attacker could leverage this issue to gain access to sensitive configuration information. The attacker could then use this information to launch further attacks against t...

Clever Copy 3.0 - Connect.INC Information Disclosure

Clever Copy 3.0 - Connect.INC Information Disclosure source: https://www.securityfocus.com/bid/17461/info Clever Copy is prone to an information-disclosure vulnerability. A remote attacker could leverage this issue to gain access to sensitive configuration information. The attacker could then use...

[ECHO_ADV_28$2006] Clever Copy <= 3.0 Connect.inc Critical Information Disclosure

/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV28$2006 --------------------------------------------------------------------------- ECHOADV28$2006 Clever Copy = 3.0 Connect.inc Critical Information Disclosure ---------------------------------------------------------------------------...

Clever Copy 2.x Multiple Vulnerabilities - Active Check

Clever Copy is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site scripting

Cross-site scripting XSS vulnerability in default.php in Clever Copy 3.0 allows remote attackers to inject arbitrary web script or HTML via the Subject field when sending private messages privatemessages.php. NOTE: the provenance of this information is unknown; the details are obtained solely fro...

CVE-2006-0796

Cross-site scripting XSS vulnerability in default.php in Clever Copy 3.0 allows remote attackers to inject arbitrary web script or HTML via the Subject field when sending private messages privatemessages.php. NOTE: the provenance of this information is unknown; the details are obtained solely fro...

CVE-2006-0796

CVE-2006-0796 affects Clever Copy 3.0: XSS in default.php that allows remote attackers to inject arbitrary web script/HTML via the Subject field when sending private messages (privatemessages.php). This is caused by insufficient input sanitization in the message Subject parameter. The vulnerabili...

CVE-2006-0796

Cross-site scripting XSS vulnerability in default.php in Clever Copy 3.0 allows remote attackers to inject arbitrary web script or HTML via the Subject field when sending private messages privatemessages.php. NOTE: the provenance of this information is unknown; the details are obtained solely fro...

CVE-2006-0796: Undefined Security Weakness

Cross-site scripting XSS vulnerability in default.php in Clever Copy 3.0 allows remote attackers to inject arbitrary web script or HTML via the Subject field when sending private messages privatemessages.php. NOTE: the provenance of this information is unknown; the details are obtained solely fro...

[SA18873] Clever Copy Private Message "Subject" Script Insertion Vulnerability

TITLE: Clever Copy Private Message "Subject" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18873 VERIFY ADVISORY: http://secunia.com/advisories/18873/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Clever Copy 3.x http://secunia.com/product/7899/...

EV0064.txt

New eVuln Advisory: Clever Copy 'Referer' & 'X-Forwarded-For' XSS Vulnerabilities http://evuln.com/vulns/64/summary.html --------------------Summary---------------- eVuln ID: EV0064 CVE: CVE-2006-0627 Vendor: 3.0 2.0 2.0a Software: Clever Copy V3 Sowtware's Web Site:...

[eVuln] Clever Copy 'Referer' & 'X-Forwarded-For' XSS Vulnerabilities

New eVuln Advisory: Clever Copy 'Referer' & 'X-Forwarded-For' XSS Vulnerabilities http://evuln.com/vulns/64/summary.html --------------------Summary---------------- eVuln ID: EV0064 CVE: CVE-2006-0627 Vendor: 3.0 2.0 2.0a Software: Clever Copy V3 Sowtware's Web Site:...

Clever Copy 2.03.0 - Multiple HTML Injection Vulnerabilities

Clever Copy 2.03.0 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/16607/info Clever Copy is prone to multiple HTML-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in dynamically generated content...

[SA18749] Clever Copy "ID" Parameter SQL Injection Vulnerability

TITLE: Clever Copy "ID" Parameter SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18749 VERIFY ADVISORY: http://secunia.com/advisories/18749/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Clever Copy 2.x http://secunia.com/product/5445/ Clever Copy 3.x...

[SA18790] Clever Copy HTTP Headers Script Insertion Vulnerabilities

TITLE: Clever Copy HTTP Headers Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA18790 VERIFY ADVISORY: http://secunia.com/advisories/18790/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Clever Copy 2.x http://secunia.com/product/5445/ Clever Copy...

Cross site scripting

Cross-site scripting XSS vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote attackers to inject arbitrary web script or HTML via the 1 Referer or 2 X-Forwarded-For headers in an HTTP request, which are not properly handled when the administrator accesses Site Stats...

CVE-2006-0627

Cross-site scripting XSS vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote attackers to inject arbitrary web script or HTML via the 1 Referer or 2 X-Forwarded-For headers in an HTTP request, which are not properly handled when the administrator accesses Site Stats...