98 matches found
CVE-2005-3520
Multiple cross-site scripting XSS vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via 1 the targeturl parameter in upgradeinprogressbackend.php, 2 the stylesheet parameter in edittablecelltypewysiwyg.php, and the bgcolor parameter in 3...
CVE-2005-3519
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the 1 INCLUDEPATH and 2 SQUIZLIBPATH parameters in newupgradefunctions.php, 3 the INCLUDEPATH parameter in initmysource.php, and the PEARPATH...
CVE-2005-3520
CVE-2005-3520 affects MySource 2.14.0 with multiple XSS weaknesses. The vulnerability is triggered via several parameters across PHP/HTML files: target_url (upgrade_in_progress_backend.php), stylesheet (edit_table_cell_type_wysiwyg.php), and bgcolor (insert_table.php, edit_table_cell_props.php, h...
CVE-2005-3520
Multiple cross-site scripting XSS vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via 1 the targeturl parameter in upgradeinprogressbackend.php, 2 the stylesheet parameter in edittablecelltypewysiwyg.php, and the bgcolor parameter in 3...
CVE-2005-3519
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the 1 INCLUDEPATH and 2 SQUIZLIBPATH parameters in newupgradefunctions.php, 3 the INCLUDEPATH parameter in initmysource.php, and the PEARPATH...
CVE-2005-3519
Multiple PHP file inclusion vulnerabilities affect MySource 2.14.0. The flaws allow remote attackers to execute arbitrary PHP code and include arbitrary local files through include path parameters in new_upgrade_functions.php, init_mysource.php, and various files using INCLUDE_PATH, SQUIZLIB_PATH...
CVE-2005-3520: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via 1 the targeturl parameter in upgradeinprogressbackend.php, 2 the stylesheet parameter in edittablecelltypewysiwyg.php, and the bgcolor parameter in 3...
CVE-2005-3519: Undefined Security Weakness
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the 1 INCLUDEPATH and 2 SQUIZLIBPATH parameters in newupgradefunctions.php, 3 the INCLUDEPATH parameter in initmysource.php, and the PEARPATH...
Secunia Research: MySource Cross-Site Scripting and File Inclusion Vulnerabilities
====================================================================== Secunia Research 18/10/2005 - MySource Cross-Site Scripting and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...
MySource 2.14 - new_upgrade_functions.php Multiple Remote File Inclusions
MySource 2.14 - newupgradefunctions.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ...
MySource 2.14 - upgrade_in_progress_backend.php?target_url Cross-Site Scripting
MySource 2.14 - upgradeinprogressbackend.php?targeturl Cross-Site Scripting source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...
MySource 2.14 - edit_table_cell_type_wysiwyg.php?Stylesheet Cross-Site Scripting
MySource 2.14 - edittablecelltypewysiwyg.php?Stylesheet Cross-Site Scripting source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...
MySource 2.14 - edit_table_cell_props.php?bgcolor Cross-Site Scripting
MySource 2.14 - edittablecellprops.php?bgcolor Cross-Site Scripting source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker m...
MySource 2.14 - 'edit_table_cell_type_wysiwyg.php?Stylesheet' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...
MySource 2.14 - 'edit_table_props.php?bgcolor' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...
MySource 2.14 - 'edit_table_cell_props.php?bgcolor' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...
MySource 2.14 - 'mimeDecode.php?PEAR_PATH' Remote File Inclusion
source: https://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary...
MySource 2.14 - 'Span.php?PEAR_PATH' Remote File Inclusion
source: https://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary...
MySource 2.14 - 'Date.php?PEAR_PATH' Remote File Inclusion
source: https://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary...
MySource 2.14 - 'upgrade_in_progress_backend.php?target_url' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...