EUVD-2005-3570

Malware in sbrugna...

Codegrrl Protection.PHP Unspecified Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15417/info Unspecified Codegrrl applications are prone to a remote arbitrary code execution vulnerability. This is due to a lack of proper sanitization of user-supplied input. An attacker can exploit this to execute...

CVE-2005-4551

The CVE-2005-4551 issue affects the web app codegrrl SimpBook 1.0 . The vulnerability is a Cross-site Scripting (XSS) flaw in sign.php when the configuration flag html_enable is enabled. An attacker can supply arbitrary HTML/script via the message parameter to index.php, which could be reflected ...

CVE-2005-4551: Undefined Security Weakness

Cross-site scripting XSS vulnerability in sign.php in codegrrl SimpBook 1.0, when htmlenable is on, allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php...

CVE-2005-3571

PHP file inclusion vulnerability in protection.php in CodeGrrl a PHPCalendar 1.0, b PHPClique 1.0, c PHPCurrently 2.0, d PHPFanBase 2.1, and e PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when registerglobals is enabled. NOTE: It was later...

CVE-2005-3571

CVE-2005-3571 affects CodeGrrl PHP applications (PHPCalendar 1.0, PHPClique 1.0, PHPCurrently 2.0, PHPFanBase 2.1, PHPQuotes 1.0; PHPFanBase 2.2 also affected). The vulnerability is a PHP file-inclusion flaw in protection.php where the siteurl parameter is unsafely used in a PHP include when regi...

CVE-2005-3571: Improper Control of Generation of Code

PHP file inclusion vulnerability in protection.php in CodeGrrl a PHPCalendar 1.0, b PHPClique 1.0, c PHPCurrently 2.0, d PHPFanBase 2.1, and e PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when registerglobals is enabled. NOTE: It was later...

CodeGrrl Applications Remote File Inclusion Vulnerabilities

The remote host appears to be running at least one of the PHP applications from CodeGrrl - PHPCalendar, PHPClique, PHPFanBase, or PHPQuotes. Under certain conditions, these applications fail to sanitize input to the 'siteurl' parameter of the 'protection.php' script before using it in a PHP...

PHPCalendar.txt

PHPCalendar and some more codegrrl.com products arbitrary code execution ========================================================================== Software: PHPCalendar, PHPClique, PHPFanBase, PHPCurrently, PHPQuotes Severity: Arbitrary code execution Risk: High Author: Robin Verton Date: Sep. 2...

[SA17542] CodeGrrl Products "siteurl" File Inclusion Vulnerability

TITLE: CodeGrrl Products "siteurl" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA17542 VERIFY ADVISORY: http://secunia.com/advisories/17542/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: PHPCalendar 1.x http://secunia.com/product/6095/ PHPClique 1.x...

Codegrrl - 'Protection.php' Code Execution

source: https://www.securityfocus.com/bid/15417/info Unspecified Codegrrl applications are prone to a remote arbitrary code execution vulnerability. This is due to a lack of proper sanitization of user-supplied input. An attacker can exploit this to execute arbitrary code in the context of the We...

Codegrrl - Protection.php Code Execution

Codegrrl - Protection.php Code Execution source: https://www.securityfocus.com/bid/15417/info Unspecified Codegrrl applications are prone to a remote arbitrary code execution vulnerability. This is due to a lack of proper sanitization of user-supplied input. An attacker can exploit this to execut...