CVE-2006-3180

CVE-2006-3180 is a cross-site scripting (XSS) vulnerability in the Confixx Pro 3.0 product, specifically in ftp_index.php, exploitable through the path parameter. The NVD entry lists a CVSSv2 base score of 6.8 (MEDIUM) with network access, requiring no authentication, and impacting confidentialit...

CVE-2006-3179

The CVE describes a Cross-site Scripting (XSS) vulnerability in the Confixx Pro line (3.0 and earlier) affecting tools_ftp_pwaendern.php, exploitable via the account parameter. The underlying issue is improper handling of input in that parameter, enabling injection of arbitrary web script/HTML. A...

confixx3-2.txt

p0w3r curse-crew.de Examples: confixx/ftplogin/username/ftpindex.php?path=alert'p0w3r oWnZ'...

confixx3.txt

Software: Confixx alert'p0 w3r oWnZ'...

Confixx <= 3

p0w3r curse-crew.de Examples: confixx/ftplogin/username/ftpindex.php?path=scriptalert'p0w3r oWnZ'/script...

Confixx <= 3

Software: Confixx = 3 Vendor: http://www.swsoft.com/ Discovered by: p0w3r - curse-crew.de Example: confixx/user/username/toolsftppwaendern.php?account=scriptalert'p0 w3r oWnZ'/script...

Confixx 3.03.1 - FTP_index.php Cross-Site Scripting

Confixx 3.03.1 - FTPindex.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18426/info Confixx is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Confixx 3.0/3.1 - 'FTP_index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18426/info Confixx is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

confixx312.txt

// Confixx 3.1.2 XSSdiv style= - Googledork: inurl:confixx inurl:login|anmeldung + Greetz to: Bluegeek + Visit: www.LoK-Crew.de...

CVE-2006-2423

Cross-site scripting XSS vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the login parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the login parameter...

CVE-2006-2423

Cross-site scripting XSS vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the login parameter...

CVE-2006-2423

The CVE-2006-2423 entry concerns a Cross-site Scripting (XSS) vulnerability in ftplogin/index.php of Confixx 3.1.2. The vulnerability arises from unvalidated input in the login parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected component: Confixx 3.1.2, specific...

CVE-2006-2423: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the login parameter...

Confixx 3.1.2 <= Code Injection

// Confixx 3.1.2 = Code Injection // ----------------------------------------------------------------- Advisory by: LoK-Crew - Exploit: http://www.example.com/ftplogin/?login="XSSdiv style= - Googledork: inurl:confixx inurl:login|anmeldung + Greetz to: Bluegeek + Visit: www.LoK-Crew.de...

Confixx 3.03.1 - index.php Cross-Site Scripting

Confixx 3.03.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17984/info Confixx is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Confixx 3.0/3.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17984/info Confixx is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

confixx_exploit.pl.txt

sry - i know this isn't a cvs repository here - but the code posted yesterday was written after some 'b33r' an i made it looking a little less drunk this morning. bye defa ----BOF---- !/usr/bin/perl exploit for confixx professional = 3.1.2 the vulerability was discovered by: LoK Crew references:...

[Full-disclosure] Confixx Index.PHP SQL Injection Vulnerability (Exploit - not new vuln)

Here is more information on the confixx vuln released by LoK Crew. Sorry for the poor quality of this posting, I was short of time. Product: ^^^^^^^ Confixx is a comprehensive control panel that provides the best value, proven quality, fully developed feature set and quality support. The software...

Cross site scripting

Cross-site scripting XSS vulnerability in allgemeintransfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the jahr parameter...