EUVD-2009-3580

Malware in sbrugna...

EUVD-2009-3581

Malware in sbrugna...

Information disclosure

HUBScript 1.0 allows remote attackers to obtain configuration information via a direct request to manage/phpinfo.php, which calls the phpinfo function...

CVE-2009-3600

HUBScript 1.0 allows remote attackers to obtain configuration information via a direct request to manage/phpinfo.php, which calls the phpinfo function...

CVE-2009-3600

HUBScript 1.0 allows remote attackers to obtain configuration information via a direct request to manage/phpinfo.php, which calls the phpinfo function...

CVE-2009-3600

CVE-2009-3600 affects HUBScript 1.0. The vulnerability is an information-disclosure in the web management path: a direct request to manage/phpinfo.php causes phpinfo() to reveal configuration details. The root cause is exposing PHP configuration via phpinfo() without proper access controls. Impac...

CVE-2009-3599

CVE-2009-3599 is an XSS vulnerability in HUBScript 1.0 affecting single_winner1.php, exploitable via the bid_id parameter. The weakness allows remote attackers to inject arbitrary web script/HTML. Public references in the sources (Secunia, OSVDB, Packet Storm, X-Force) confirm the issue but do no...

CVE-2009-3599: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in singlewinner1.php in HUBScript 1.0 allows remote attackers to inject arbitrary web script or HTML via the bidid parameter...

CVE-2009-3600: Exposure of Sensitive Information to an Unauthorized Actor

HUBScript 1.0 allows remote attackers to obtain configuration information via a direct request to manage/phpinfo.php, which calls the phpinfo function...

Freewebscriptz HUBScript - single_winner1.php Cross-Site Scripting

Freewebscriptz HUBScript - singlewinner1.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43474/info HUBScript is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Freewebscriptz HUBScript - 'single_winner1.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43474/info HUBScript is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

HUBScript 1 Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...