51 matches found
CVE-2008-3937
Multiple cross-site scripting XSS vulnerabilities in Open Media Collectors Database OpenDb 1.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 userid parameter in an edit action to useradmin.php, the 2 title parameter to listings.php, and the 3 redirecturl parameter to...
CVE-2008-3937
Multiple cross-site scripting XSS vulnerabilities in Open Media Collectors Database OpenDb 1.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 userid parameter in an edit action to useradmin.php, the 2 title parameter to listings.php, and the 3 redirecturl parameter to...
CVE-2008-3938
Cross-site request forgery CSRF vulnerability in useradmin.php in Open Media Collectors Database OpenDb 1.0.6 allows remote attackers to change arbitrary passwords via an updatepassword action...
CVE-2008-3937
OpenDb (Open Media Collectors Database) version 1.0.6 contains multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary script/HTML via three inputs: user_id in edit action to user_admin.php, title in listings.php, and redirect_url in user_profile...
CVE-2008-3938
CVE-2008-3938 describes a CSRF flaw in Open Media Collectors Database (OpenDb) 1.0.6, where an attacker can induce a remote user to perform an update_password action via user_admin.php, potentially changing arbitrary passwords. The issue affects the vulnerability in the OpenDb interface, with the...
OpenDB 1.0.6 - user_admin.php?user_id Cross-Site Scripting
OpenDB 1.0.6 - useradmin.php?userid Cross-Site Scripting source: https://www.securityfocus.com/bid/30989/info Open Media Collectors Database OpenDb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage thes...
CVE-2008-2020
The CAPTCHA implementation as used in 1 Francisco Burzi PHP-Nuke 7.0 and 8.1, 2 my123tkShop e-Commerce-Suite aka 123tkShop 0.9.1, 3 phpMyBitTorrent 1.2.2, 4 TorrentFlux 2.3, 5 e107 0.7.11, 6 WebZE 0.5.9, 7 Open Media Collectors Database aka OpenDb 1.5.0b4, and 8 Labgab 1.1 uses a codebg.jpg...
CVE-2008-2020
The CVE-2008-2020 issue affects multiple CAPTCHA implementations: PHP-Nuke (versions 7.0–8.1), my123tkShop 0.9.1, phpMyBitTorrent 1.2.2, TorrentFlux 2.3, e107 0.7.11, WebZE 0.5.9, Open Media Collectors Database 1.5.0b4, and Labgab 1.1. The root cause is use of a code_bg.jpg background with PHP Im...
PT-2008-3540 · Francisco Burzi +7 · Php-Nuke +7
Name of the Vulnerable Software and Affected Versions: Francisco Burzi PHP-Nuke versions 7.0 through 8.1 my123tkShop e-Commerce-Suite version 0.9.1 phpMyBitTorrent version 1.2.2 TorrentFlux version 2.3 e107 version 0.7.11 WebZE version 0.5.9 Open Media Collectors Database version 1.5.0b4 Labgab...
Fenice Oms 1.10 - GET Remote Buffer Overflow
Fenice Oms 1.10 - GET Remote Buffer Overflow / IHS Iran Homeland Security public source code Fenice - Open Media Streaming Server remote BOF exploit author : c0d3r "kaveh razavi" [email protected] package : fenice-1.10.tar.gz and prolly prior versions workaround : update after patch release...
