CVE-2006-2687

Cross-site scripting XSS vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject arbitrary web script or HTML via the email address useremail parameter...

CVE-2006-2687

CVE-2006-2687 is a cross-site scripting (XSS) vulnerability in adduser.php of the PHP-AGTC Membership System, affecting version 1.1a and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the email address parameter (useremail). NVD metrics assign a medium base ...

Super Link Exchange Script v1.0

Super Link Exchange Script v1.0 Homepage: http://www.ebizunion.com/guidetosuper.php Description: Main Features: 1. Add unlimited nested category/sub-category, 2. Can check reciprocal link back, 3. Can hide and delete no link back sites. 4. Template can be edited and suitable to fit your current...

PHP AGTC-Membership system <= v1.1a XSS

PHP AGTC-Membership system = v1.1a XSS Discovered by: Nomenumbra Date: 23/5/2006 impact:moderate privilege escalation,possible defacement Ordinary users can add users to the user management system as well, or change their own email address, which isn't properly sanitized, thus allowing XSS as...

xFlow v5.x multiple vuln.

xFlow v5.x multiple vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendorlink:http://www.skymarx.com/affiliatesoftware.html affected versions:v5.46.11 and previous orginal advisory: http://pridels.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html Product info: After over five years of...

Free Articles Directory Remote Command Exucetion

Web Site : http://www.99articles.com Script Demo Site : http://www.articlesone.com General : 1. Support rssfeed XML to distribute articles for others website and blogs. It will make grow website popularity 2. Newsletter to be growing visitors 3. Membership system for writer participants submit...

CVE-2006-1155

Cross-site scripting XSS vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in 1 login.asp and 2 default.asp...

Sql injection

SQL injection vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to execute arbitrary SQL commands via the Username parameter in login.asp...

CVE-2006-1156

SQL injection vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to execute arbitrary SQL commands via the Username parameter in login.asp...

CVE-2006-1155

CVE-2006-1155 affects the Manas Tungare Site Membership Script. The vulnerability is a stored-reflected cross-site scripting (XSS) in the Error parameter of login.asp and default.asp, reported as exploitable before 8 March 2006. The connected documents provide the basic description and CVSS-like ...

CVE-2006-1156

The CVE-2006-1156 entry concerns the Manas Tungare Site Membership Script (pre-8 March 2006) with a SQL injection vulnerability. The Username parameter in login.asp is exploitable to run arbitrary SQL commands, allowing remote attackers to impact the backend database. The connected documents prov...

CVE-2006-1155

Cross-site scripting XSS vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in 1 login.asp and 2 default.asp...

CVE-2006-1021

CVE-2006-1021 describes a cross-site scripting (XSS) vulnerability in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) version 3. The flaw resides in the sol_menu.php script and allows an attacker to inject arbitrary web script or HTML via the kuladi parameter ($kul_adi variable). ...

PEHEPE-XSS.txt

Advisory: PEHEPE Membership Management System Multiple Vulnerabilities - Author: Yunus Emre Yilmaz -- mailatyunusemreyilmazdotcom - Application: PEHEPE MemberShip Management System http://www.pehepe.org/UYELİK3 - Affected Version : v3 maybe older versions.. - Risk : Critical -- Details0 : XSS...

PEHEPE Membership Management System Multiple Vulnerabilities

Advisory: PEHEPE Membership Management System Multiple Vulnerabilities - Author: Yunus Emre Yilmaz -- mailatyunusemreyilmazdotcom - Application: PEHEPE MemberShip Management System http://www.pehepe.org/UYELK3 - Affected Version : v3 maybe older versions.. - Risk : Critical -- Details0 : XSS...

PEHEPE Membership Management System 3.0 - Remote PHP Script Code Injection

PEHEPE Membership Management System 3.0 - Remote PHP Script Code Injection source: https://www.securityfocus.com/bid/16887/info PEHEPE Membership Management System is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to facilitate a compromise of the applicati...

PEHEPE Membership Management System 3.0 - Remote PHP Script Code Injection

source: https://www.securityfocus.com/bid/16887/info PEHEPE Membership Management System is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to facilitate a compromise of the application and the underlying system; other attacks are also possible. PEHEPE...

PEHEPE Membership Management System 3.0 - Sol_menu.php Cross-Site Scripting

PEHEPE Membership Management System 3.0 - Solmenu.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16885/info PEHEPE Membership Management System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplie...

PEHEPE Membership Management System 3.0 - 'Sol_menu.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16885/info PEHEPE Membership Management System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

security flaw

The Internet Group Management Protocol IGMP allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from...