EUVD-2006-0987

Malware in sbrugna...

EUVD-2006-3531

Malware in sbrugna...

EUVD-2006-3827

Malware in sbrugna...

EJ3 TOPo 2.2.178 Inc_header.PHP Cross-Site Scripting Vulnerability

No description provided by source...

EJ3 TOPo 2.2 - Multiple Index.PHP Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13700/info TOPo is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitra...

CVE-2006-3834

EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry passwords via log files, referrers, or other vectors...

CVE-2006-3833

index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten entries via a URL with a modified entry ID...

CVE-2006-3833

index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten entries via a URL with a modified entry ID...

CVE-2006-3833: Undefined Security Weakness

index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten entries via a URL with a modified entry ID...

CVE-2006-3834

EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry passwords via log files, referrers, or other vectors...

CVE-2006-3833

This CVE affects EJ3 TOPo 2.2.178 and concerns index.php handling in EJ3 TOPo where a modified entry ID in a URL allows remote attackers to overwrite existing entries and create new passwords for those entries. Root cause appears to be improper handling of entry IDs in the web interface, enabling...

CVE-2006-3834

EJ3 TOPo 2.2.178 is affected: the product stores the password in cleartext in the ID field used by index.php, enabling context-dependent attackers to obtain entry passwords via log files, referrers, or similar vectors. The available sources (NVD/NVD listing) describe this plaintext password expos...

CVE-2006-3834: Undefined Security Weakness

EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry passwords via log files, referrers, or other vectors...

CVE-2006-3536

CVE-2006-3536 affects EJ3 TOPo (versions up to 2.2.178). The vulnerability is a direct static code injection flaw in code/class_db_text.php, enabling remote attackers to run arbitrary PHP code by providing crafted values (e.g., descripcion, pais) that are stored directly in a PHP script. Impact i...

CVE-2006-3536

Direct static code injection vulnerability in code/classdbtext.php in EJ3 TOPo 2.2.178 and earlier allows remote attackers to execute arbitrary PHP code via parameters such as 1 descripcion and 2 pais, which are stored directly in a PHP script. NOTE: the provenance of this information is unknown;...

CVE-2006-3536: Undefined Security Weakness

Direct static code injection vulnerability in code/classdbtext.php in EJ3 TOPo 2.2.178 and earlier allows remote attackers to execute arbitrary PHP code via parameters such as 1 descripcion and 2 pais, which are stored directly in a PHP script. NOTE: the provenance of this information is unknown;...

EJ3 TOPo 2.2 (descripcion) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl EJ3 TOPO 2.2 Remote Code Execution Exploit --------------------------------------------- Note : This Exploit Just run TOPO 2.2 IHST : www.Hackerz.Ir AST : www.aria-security.net Coded & Discovered By Hessam-x use LWP::UserAgent; use LWP::Simple; us...

CVE-2006-0984

Cross-site scripting XSS vulnerability in incheader.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the gTopNombre parameter...

CVE-2006-0984

CVE-2006-0984 affects EJ3 TOPo version 2.2.178, where the script inc_header.php is vulnerable to cross-site scripting (XSS). The underlying issue is that the gTopNombre parameter is used in a way that allows remote attackers to inject arbitrary web script or HTML. The NVD entry lists an overall C...

CVE-2006-0984: Undefined Security Weakness

Cross-site scripting XSS vulnerability in incheader.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the gTopNombre parameter...