MySQL Eventum Multiple flaws

The remote host seems to be running MySQL Eventum, a user-friendly and flexible issue tracking system written in PHP. The remote version of this software is vulnerable to cross-site scripting attacks, through multiple scripts. With a specially crafted URL, an attacker can use the remote server to...

MySQL Eventum <= 1.5.5 (login.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w use IO::Socket; use strict; print "\n"; print " MySQL Eventum = v1.5.5 SQL Injection PoC \n"; print " James Bercegay // gulftech.org // 7-28-05 \n"; print "\n"; my $host = 'localhost'; my $path = '/eventum/login.php'; my $user = '2'; my $port =...

MySQL Eventum 1.5.5 - login.php SQL Injection

MySQL Eventum 1.5.5 - login.php SQL Injection !/usr/bin/perl -w use IO::Socket; use strict; print "\n"; print " MySQL Eventum new PeerAddr = $host, PeerPort = $port, Proto = 'tcp' || die "! Unable to connect to $host\n"; my $post =...

eventum.pl.txt

!/usr/bin/perl -w use IO::Socket; use strict; print "\n"; print " MySQL Eventum new PeerAddr = $host, PeerPort = $port, Proto = 'tcp' || die "! Unable to connect to $host\n"; my $post =...

MySQL Eventum 1.5.5 - 'login.php' SQL Injection

!/usr/bin/perl -w use IO::Socket; use strict; print "\n"; print " MySQL Eventum new PeerAddr = $host, PeerPort = $port, Proto = 'tcp' || die "! Unable to connect to $host\n"; my $post =...

mysqlEventum.txt

GulfTech Security Research July 31st, 2005 Vendor : MySQL AB URL : http://dev.mysql.com/downloads/other/eventum/ Version : MySQL AB Eventum = 1.5.5 Risk : Multiple Vulnerabilities Description: Eventum is a user-friendly and flexible issue tracking system that can be used by a support department t...

MySQL Eventum <= 1.5.5 (login.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== MySQL Eventum new PeerAddr = $host, PeerPort = $port, Proto = 'tcp' || die "! Unable to connect to $host\n"; my $post =...

MySQL AB Eventum 1.x - view.php?id Cross-Site Scripting

MySQL AB Eventum 1.x - view.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

MySQL AB Eventum 1.x - list.php?release Cross-Site Scripting

MySQL AB Eventum 1.x - list.php?release Cross-Site Scripting source: https://www.securityfocus.com/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

MySQL AB Eventum 1.x - 'list.php?release' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

MySQL AB Eventum 1.x - 'view.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

MySQL AB Eventum 1.x - get_jsrs_data.php?F Cross-Site Scripting

MySQL AB Eventum 1.x - getjsrsdata.php?F Cross-Site Scripting source: https://www.securityfocus.com/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker ma...

MySQL AB Eventum 1.x - 'get_jsrs_data.php?F' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14436/info MySQL Eventum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

[SA16255] MySQL Eventum PEAR XML_RPC PHP Code Execution Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

XML-RPC for PHP Remote Code Injection Vulnerability

Description XML-RPC for PHP is affected by a remote code-injection vulnerability. An attacker may exploit this issue to execute arbitrary commands or code in the context of the webserver. This may facilitate various attacks, including unauthorized remote access. XML-RPC for PHP 1.1 and prior...

MySQL Eventum index.php email Parameter XSS

The MySQL Eventum install hosted on the remote web server is vulnerable to a cross-site scripting attack because it fails to sanitize user-supplied input to the 'email' parameter of the 'index.php' script before using it to generate dynamic HTML output. With a specially crafted URL, an attacker c...

[SA13677] MySQL Eventum Multiple Vulnerabilities

TITLE: MySQL Eventum Multiple Vulnerabilities SECUNIA ADVISORY ID: SA13677 VERIFY ADVISORY: http://secunia.com/advisories/13677/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting WHERE: From remote SOFTWARE: MySQL Eventum 1.x http://secunia.com/product/4464/ DESCRIPTION:...