Jax Petition 3.06 Book - smileys.php?languagepack Local File Inclusion

Jax Petition 3.06 Book - smileys.php?languagepack Local File Inclusion source: https://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these...

Jax Petition 3.06 Book - 'smileys.php?languagepack' Local File Inclusion

source: https://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to have local script code execut...

Jax Petition Book 3.06 - jax_petitionbook.php?languagepack Local File Inclusion

Jax Petition Book 3.06 - jaxpetitionbook.php?languagepack Local File Inclusion source: https://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these...

Jax Petition Book 3.06 - 'jax_petitionbook.php?languagepack' Local File Inclusion

source: https://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to have local script code execut...

jax.txt

Jax Guestbook Cross Site Scripting Vulnerability Risk: Less Critical Class: Remote Version: 3.50 ----------------------------------------------------------------- Example: http://target/path/guestbook.admin.php?action=list&guestbookid=0&language=german&gmtofs=0&page=code...

[SA20110] Jax Guestbook "guestbook.admin.php" Cross-Site Scripting

TITLE: Jax Guestbook "guestbook.admin.php" Cross-Site Scripting SECUNIA ADVISORY ID: SA20110 VERIFY ADVISORY: http://secunia.com/advisories/20110/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Jax Guestbook 3.x http://secunia.com/product/5494/ DESCRIPTION: Kiki...

[SA19843] Jax Guestbook "page" Cross-Site Scripting Vulnerability

TITLE: Jax Guestbook "page" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19843 VERIFY ADVISORY: http://secunia.com/advisories/19843/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Jax Guestbook 3.x http://secunia.com/product/5494/ DESCRIPTION:...

CVE-2006-1913

Cross-site scripting XSS vulnerability in jaxguestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in jaxguestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1913

Cross-site scripting XSS vulnerability in jaxguestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1913

CVE-2006-1913 describes a cross-site scripting (XSS) vulnerability in the PHP script jax_guestbook.php of Jax Guestbook versions 3.1, 3.31, and 3.50 . The issue arises because the attacker can inject arbitrary web script or HTML via the query parameter page . The vulnerability is exploitable remo...

Jax Guestbook 3.50 - Page Cross-Site Scripting

Jax Guestbook 3.50 - Page Cross-Site Scripting source: https://www.securityfocus.com/bid/17560/info Jax Guestbook is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed ...

Jax Calendar 1.34 - jax_calendar.php SQL Injection

Jax Calendar 1.34 - jaxcalendar.php SQL Injection source: https://www.securityfocus.com/bid/16130/info Jax Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Jax Calendar 1.34 - 'jax_calendar.php' SQL Injection

source: https://www.securityfocus.com/bid/16130/info Jax Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

CVE-2005-4008

SQL injection vulnerability in jaxcalendar.php in Jax Calendar 1.34 allows remote attackers to execute arbitrary SQL commands via the 1 calid parameter, and possibly the 2 Y and 3 m parameters...

CVE-2005-4008

CVE-2005-4008 affects Jax Calendar 1.34. A SQL injection flaw exists in jax_calendar.php, exploitable via the cal_id parameter and possibly Y and m parameters, allowing remote attackers to alter/steal data. The NVD reports a CVSSv2 base score of 7.5 ( HIGH ) with network access, low attack comple...

CVE-2005-4008

SQL injection vulnerability in jaxcalendar.php in Jax Calendar 1.34 allows remote attackers to execute arbitrary SQL commands via the 1 calid parameter, and possibly the 2 Y and 3 m parameters...

Jax Calendar 1.34 vuln.

Jax Calendar 1.34 vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/jax-calendar-134-vuln.html Vendor:http://www.jtr.de/scripting/php/calendar/indexeng.html affected version:1.34 and prior Product Description: Jax Calendar is an online calendar...

[SA16338] Jax LinkLists Cross-Site Scripting and Information Disclosure

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

JaxXSS.txt

Jax PHP Scripts multiple vulnerabilities vendor url:http://www.jtr.de/scripting/php/ Advisory:http://lostmon.blogspot.com/2005/08/ jax-php-scripts-multiple.html vendor notify:yes exploit available:yes sumary: 0- Description. 1- Products affected. 2- Jax Guestbook report. 3- Jax Petitionbook repor...