Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------------- Title: Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.comhttp://gmail.com Date: 11. December 2009...

Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities =======================================================...

Chipmunk Newsletter XSRF

------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009. -------------------------------------------------------------------------------------------------...

Chipmunk Board Script 1.x - Multiple Cross-Site Request Forgery Vulnerabilities

------------------------------------------------------------------------------------------------- Title: Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 11. December 2009...

Chipmunk NewsLetter - Cross-Site Request Forgery

Chipmunk NewsLetter - Cross-Site Request Forgery ------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009...

Chipmunk Newsletter CSRF Vulnerabilities

Exploit for unknown platform in category web applications ======================================== Chipmunk Newsletter CSRF Vulnerabilities ======================================== ------------------------------------------------------------------------------------------------- Title: Chipmunk...

Chipmunk Newsletter CSRF Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009...

Chipmunk NewsLetter - Cross-Site Request Forgery

------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009. -------------------------------------------------------------------------------------------------...

Chipmunk NewsLetter - Persistent Cross-Site Scripting

Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more vulnerabilities in their web apps, but I could not even get them to work out of the box.. http://server/newsletter/admin/addlist.php Look no sanitization: 8alert'i could get your cookie'&submit=submit...

Chipmunk Newsletter Persistant XSS Vulnerability

Exploit for unknown platform in category web applications ================================================ Chipmunk Newsletter Persistant XSS Vulnerability ================================================ Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more...

Chipmunk NewsLetter - Persistent Cross-Site Scripting

Chipmunk NewsLetter - Persistent Cross-Site Scripting Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more vulnerabilities in their web apps, but I could not even get them to work out of the box.. http://server/newsletter/admin/addlist.php Look no sanitization:...

CVE-2008-7072

Cross-site scripting XSS vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary web script or HTML via the start parameter...

Sql injection

SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL commands via the username parameter, related to login.php. NOTE: some of these details are obtained from third party information...

CVE-2008-7071

SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL commands via the username parameter, related to login.php. NOTE: some of these details are obtained from third party information...

CVE-2008-7071

CVE-2008-7071 is a SQL injection vulnerability in Chipmunk Topsites’ authenticate.php. The flaw allows remote attackers to execute arbitrary SQL commands via the username parameter (related to login.php). The public records here note a CVSS v2 base score of 7.5 (High) with network access and no a...

CVE-2008-7072

Cross-site scripting XSS vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary web script or HTML via the start parameter...

CVE-2008-7072

CVE-2008-7072 is an XSS vulnerability in Chipmunk Topsites, affecting index.php via the start parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The description and connected records specify the vulnerable component as Chipmunk Topsites’ index.php and the start p...

CVE-2008-7071: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL commands via the username parameter, related to login.php. NOTE: some of these details are obtained from third party information...

CVE-2008-7072: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary web script or HTML via the start parameter...

Chipmunk Guestbook Index.PHP SQL Injection Vulnerability

Chipmunk Guestbook is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying...