CVE-2006-1759

Cross-site scripting XSS vulnerability in allgemeintransfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the jahr parameter...

CVE-2006-1759

Cross-site scripting XSS vulnerability in allgemeintransfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the jahr parameter...

CVE-2006-1759

CVE-2006-1759 describes a Cross-site Scripting (XSS) vulnerability in SWSoft Confixx 3.1.2, specifically in the file allgemein_transfer.php . The issue arises through the jahr parameter, enabling remote attackers to inject arbitrary web script or HTML. The entry notes the vulnerability as applica...

Sql injection

SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands via the SID parameter...

CVE-2006-1754

SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands via the SID parameter...

CVE-2006-1754

CVE-2006-1754 affects SWSoft Confixx versions 3.0.6, 3.0.8, and 3.1.2. The vulnerability is a SQL injection in index.php that allows remote attackers to execute arbitrary SQL commands via the SID parameter. The connection documents confirm the affected product/version and the injection mechanism,...

CVE-2006-1754: Undefined Security Weakness

SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands via the SID parameter...

CVE-2006-1754

SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands via the SID parameter...

CVE-2006-1759: Undefined Security Weakness

Cross-site scripting XSS vulnerability in allgemeintransfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the jahr parameter...

Confixx 3.1.2 <= SQL Injection

// Confixx 3.1.2 = SQL Injection // ----------------------------------------------------------------- Advisory by: LoK-Crew Snake23 - Exploit: http://www.victim.com/user/index.php?SID=SQL - Googledork: inurl:confixx inurl:login|anmeldung + Greetz to: Bluegeek and Team.Rootbox + Visit:...

SWSoft Confixx 3.0.63.0.83.1.2 - index.php SQL Injection

SWSoft Confixx 3.0.63.0.83.1.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/17476/info Confixx is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successfu...

Confixx 3.1.2 <= Cross Site Scripting Vuln

// Confixx 3.1.2 = Cross Site Scripting Vuln // ----------------------------------------------------------------- Advistory by: LoK-Crew Snake23 - Exploit: http://www.victim.com/allgemeintransfer.php?monat=4&jahr=XSS - Googledork: - + Greetz to: Bluegeek and Team.Rootbox + Visit: www.LoK-Crew.de....

SWSoft Confixx 3.1.2 - Jahr Cross-Site Scripting

SWSoft Confixx 3.1.2 - Jahr Cross-Site Scripting source: https://www.securityfocus.com/bid/17466/info Confixx is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

SWSoft Confixx 3.0.6/3.0.8/3.1.2 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/17476/info Confixx is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

SWSoft Confixx 3.1.2 - 'Jahr' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17466/info Confixx is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

CVE-2005-1302

SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field...

CVE-2005-1302

SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field...

CVE-2005-1302

The CVE-2005-1302 issue affects Confixx 3.08 and earlier, where a SQL injection vulnerability exists in the change user field. The underlying cause is improper handling of user-supplied input in the affected code path, allowing remote attackers to execute arbitrary SQL commands. The available doc...

CVE-2005-1302: Undefined Security Weakness

SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field...

[Full-Disclosure] Security hole in Confixx backup script

Hi, I found a security hole in Confixx. A malicious backup request via the webinterface might be used by any user to read files located in /root which is the default installation directory of confixx. The most interesting files you can retrieve with this attack are: /root/confixx/safe/shadow.tmp...