NPDS 4.8 5.0 - sdv_infos.php?sitename Cross-Site Scripting

NPDS 4.8 5.0 - sdvinfos.php?sitename Cross-Site Scripting source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL...

NPDS 4.8 < 5.0 - 'admin.php?language' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may result in the theft of...

NPDS 4.8 < 5.0 - 'faq.php?categories' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may result in the theft of...

NPDS 4.8 < 5.0 - 'reviews.php?title' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may result in the theft of...

NPDS 4.8 5.0 - modules.php?Lettre Cross-Site Scripting

NPDS 4.8 5.0 - modules.php?Lettre Cross-Site Scripting source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL...

NPDS 4.8 5.0 - reply.php?image_subject Cross-Site Scripting

NPDS 4.8 5.0 - reply.php?imagesubject Cross-Site Scripting source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL...

NPDS 4.8 5.0 - faq.php?categories Cross-Site Scripting

NPDS 4.8 5.0 - faq.php?categories Cross-Site Scripting source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL...

NPDS 4.8 < 5.0 - 'sdv_infos.php?sitename' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may result in the theft of...

NPDS 4.8 < 5.0 Glossaire Module - 'terme' SQL Injection

source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may result in the theft of...

NPDS 4.8 /5.0 - 'modules.php?Lettre' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may result in the theft of...

[SA15385] NPDS Cross-Site Scripting and SQL Injection Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: NPDS Cross-Site Scripting and SQL Injection...

CVE-2005-1637

CVE-2005-1637 concerns NPDS versions 4.8 and 5.0, where multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands through the user-controlled thold parameter in the PHP scripts comments.php or pollcomments.php . The underlying issue is improper handling of in...

CVE-2005-1637

Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via the thold parameter to 1 comments.php or 2 pollcomments.php...

CVE-2005-1637

Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via the thold parameter to 1 comments.php or 2 pollcomments.php...

CVE-2005-1637: Undefined Security Weakness

Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via the thold parameter to 1 comments.php or 2 pollcomments.php...

NPDS 4.8/5.0 - 'comments.php?thold' SQL Injection

source: https://www.securityfocus.com/bid/13649/info NPDS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'thold' parameter. Successful exploitation could result in a compromise of the application,...

NPDS 4.8/5.0 - 'pollcomments.php?thold' SQL Injection

source: https://www.securityfocus.com/bid/13649/info NPDS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'thold' parameter. Successful exploitation could result in a compromise of the application,...

NPDS 4.85.0 - pollcomments.php?thold SQL Injection

NPDS 4.85.0 - pollcomments.php?thold SQL Injection source: https://www.securityfocus.com/bid/13649/info NPDS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'thold' parameter. Successful exploitation cou...

CVE-2002-1804

Cross-site scripting XSS vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...

NPDS 4.8 - News Message HTML Injection

NPDS 4.8 - News Message HTML Injection source: https://www.securityfocus.com/bid/5797/info Problems with NPDS could make it possible to execute arbitrary script code in a vulnerable client. NPDS does not sufficiently filter potentially malicious HTML code from news posts. As a result, when a user...