NPDS <= 5.10 Local Inclusion, XSS, Full path disclosure

// Script Web -------- www.npds.org versions --- NPDS = 5.10 Solutions -- None official Note ------- Vendor has been contacted // Local Inclusion http://.../header.php?DefaultTheme=../apache/logs/error.log00...

[EXPL] Net Portal Dynamic System Denial of Service Exploit

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Net Portal Dynamic System 5.0 - Register Users Denial of Service

Net Portal Dynamic System 5.0 - Register Users Denial of Service !/usr/bin/perl Type|+ Register multiple users for Denial of Service Vendor url|+ www.npds.org Little description|+ NPDS Net Portal Dynamic System is a Frenchand now English ! GNU dynamic portal Solution|+ None official but you can a...

CVE-2002-1804

Cross-site scripting XSS vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...

CVE-2002-1804

The CVE-2002-1804 entry documents a Cross-site scripting (XSS) vulnerability in NPDS 4.8, allowing remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag. Affected component: NPDS 4.8 frontend rendering of IMG tags; root cause is improper handling/escaping of inline ...

CVE-2002-1804: Undefined Security Weakness

Cross-site scripting XSS vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...

CVE-2005-1804

Multiple SQL injection vulnerabilities in Net Portal Dynamic System NPDS 5.0 allow remote attackers to execute arbitrary SQL commands via the 1 terme parameter in the glossaire module glossaire.php or 2 query parameter to links.php...

CVE-2005-1803

CVE-2005-1803 affects Net Portal Dynamic System (NPDS) 5.0. The description lists multiple XSS vectors: via the language parameter to admin.php or powerpack_f.php; the sitename parameter to sdv_infos.php; the categories parameter to faq.php; the lettre parameter to the glossaire module; the title...

CVE-2005-1804

NPDS 5.0 contains multiple SQL injection vulnerabilities. Specifically, remote attackers can craft requests to (1) glossaire.php using the terme parameter and (2) links.php using the query parameter to execute arbitrary SQL commands. This is due to improper handling of user-supplied input. The im...

CVE-2005-1804: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Net Portal Dynamic System NPDS 5.0 allow remote attackers to execute arbitrary SQL commands via the 1 terme parameter in the glossaire module glossaire.php or 2 query parameter to links.php...

CVE-2005-1803: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Net Portal Dynamic System NPDS 5.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to 1 admin.php, or 2 powerpackf.php, 3 the sitename parameter to sdvinfos.php, 4 the categories parameter to faq.php, 5...

CVE-2005-1804

Multiple SQL injection vulnerabilities in Net Portal Dynamic System NPDS 5.0 allow remote attackers to execute arbitrary SQL commands via the 1 terme parameter in the glossaire module glossaire.php or 2 query parameter to links.php...

NPDS 4.8 5.0 - links.php?Query SQL Injection

NPDS 4.8 5.0 - links.php?Query SQL Injection source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attack...

NPDS 4.8 5.0 - admin.php?language Cross-Site Scripting

NPDS 4.8 5.0 - admin.php?language Cross-Site Scripting source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL...

NPDS 4.8 5.0 - reviews.php?title Cross-Site Scripting

NPDS 4.8 5.0 - reviews.php?title Cross-Site Scripting source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injecti...

NPDS 4.8 5.0 - powerpack_f.php?language Cross-Site Scripting

NPDS 4.8 5.0 - powerpackf.php?language Cross-Site Scripting source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL...

NPDS 4.8 5.0 Glossaire Module - terme SQL Injection

NPDS 4.8 5.0 Glossaire Module - terme SQL Injection source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection...

NPDS 4.8 < 5.0 - 'links.php?Query' SQL Injection

source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may result in the theft of...

NPDS 4.8 < 5.0 - 'powerpack_f.php?language' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may result in the theft of...

NPDS 4.8 < 5.0 - 'reply.php?image_subject' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may result in the theft of...