EUVD-2007-4524

Malware in sbrugna...

EUVD-2007-4523

Malware in sbrugna...

EUVD-2007-4437

Malware in sbrugna...

EUVD-2007-4404

Malware in sbrugna...

EUVD-2007-4402

Malware in sbrugna...

Olate Download 3.4.1 Admin.PHP Remote Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25343/info Olate Download is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to gain administrative access to the affected application. Successfully exploiting this issue will result in...

Olate Download 3.4.2 ~ userupload.php ~ Upload Executable Files

VISIT ORIGINAL ADVISORY FOR MORE DETAILS http://myimei.com/security/2007-09-01/olate-download-342-useruploadphp-upload-executable-files.html VISIT ORIGINAL ADVISORY FOR MORE DETAILS/ ——-Summary—— Software: Olate Download Sowtware's Web Site: http://www.olate.co.uk/ Versions: 3.4.2 Class: Remote...

Olate Download 3.4.2~uploads folder ~ directory traversal

VISIT ORIGINAL ADVISORY FOR MORE DETAILS http://myimei.com/security/2007-09-01/olate-download-342uploads-folder-directory-traversal.html VISIT ORIGINAL ADVISORY FOR MORE DETAILS ——-Summary—— Software: Olate Download Sowtware's Web Site: http://www.olate.co.uk/ Versions: 3.4.2 Class: Remote Status...

CVE-2007-4540

Multiple SQL injection vulnerabilities in download.php in Olate Download od 3.4.2 allow remote attackers to execute arbitrary SQL commands via the 1 HTTPREFERER or 2 HTTPUSERAGENT HTTP header...

CVE-2007-4541

Multiple cross-site scripting XSS vulnerabilities in Olate Download od 3.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the PHPSELF variable in modules/core/uim.php and 2 url tags in a comment in modules/core/fldm.php...

Sql injection

Multiple SQL injection vulnerabilities in download.php in Olate Download od 3.4.2 allow remote attackers to execute arbitrary SQL commands via the 1 HTTPREFERER or 2 HTTPUSERAGENT HTTP header...

CVE-2007-4541

CVE-2007-4541 concerns Olate Download (od) 3.4.2. The vulnerability arises from multiple cross-site scripting (XSS) flaws: (1) using the PHP_SELF variable in modules/core/uim.php and (2) [url] tags within a comment in modules/core/fldm.php. These flaws allow remote attackers to inject arbitrary w...

CVE-2007-4540

Multiple SQL injection vulnerabilities in download.php in Olate Download od 3.4.2 allow remote attackers to execute arbitrary SQL commands via the 1 HTTPREFERER or 2 HTTPUSERAGENT HTTP header...

CVE-2007-4540

CVE-2007-4540 affects Olate Download (od) 3.4.2, specifically the download.php module. The vulnerability comprises multiple SQL injection flaws that can be triggered by crafted HTTP headers (HTTP_REFERER or HTTP_USER_AGENT), allowing remote attackers to execute arbitrary SQL commands. The connect...

CVE-2007-4541

Multiple cross-site scripting XSS vulnerabilities in Olate Download od 3.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the PHPSELF variable in modules/core/uim.php and 2 url tags in a comment in modules/core/fldm.php...

CVE-2007-4540: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in download.php in Olate Download od 3.4.2 allow remote attackers to execute arbitrary SQL commands via the 1 HTTPREFERER or 2 HTTPUSERAGENT HTTP header...

CVE-2007-4541: Cross-Site Request Forgery (CSRF)

Multiple cross-site scripting XSS vulnerabilities in Olate Download od 3.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the PHPSELF variable in modules/core/uim.php and 2 url tags in a comment in modules/core/fldm.php...

olateuim-xss.txt

-Summary- Software: Olate Download Sowtwares Web Site: http://www.olate.co.uk/ Versions: 3.4.2 Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei addmimistrator Risk Level: Middel Description Olate download is prone to Cross site scripting, cause of...

olatedownload-sql.txt

-Summary- Software: Olate Download Sowtwares Web Site: http://www.olate.co.uk/ Versions: 3.4.2 Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei addmimistrator Risk Level: Middel Description Olate download is prone to SQL injection in download.php file...

olatedownload-xss.txt

-Summary- Software: Olate Download Sowtwares Web Site: http://www.olate.co.uk/ Versions: 3.4.2 Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei addmimistrator Risk Level: Middel Description Olate download is prone to Cross site scripting, cause of...