CVE-2008-2788

Cross-site scripting XSS vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter...

CVE-2008-2787

Cross-site scripting XSS vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the lastmessage parameter...

CVE-2008-2788

Cross-site scripting XSS vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the lastmessage parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter...

CVE-2008-2787

Cross-site scripting XSS vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the lastmessage parameter...

CVE-2008-2787

CVE-2008-2787 is an XSS vulnerability in OpenDocMan 1.2.5 (out.php) allowing remote injection of script/HTML via the last_message parameter. Documented impact is remote script/HTML execution; the connected documents do not provide a patch/versioned fix.

CVE-2008-2788

Cross-site scripting XSS vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter...

CVE-2008-2788

CVE-2008-2788 is an XSS vulnerability affecting OpenDocMan 1.2.5, reported in multiple sources. The issue resides in index.php, where the redirection parameter can be exploited by remote attackers to inject arbitrary web script or HTML. The vulnerability is described consistently across CVE recor...

CVE-2008-2787: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the lastmessage parameter...

CVE-2008-2788: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter...

OpenDocMan 1.x - out.php Cross-Site Scripting

OpenDocMan 1.x - out.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29765/info OpenDocMan is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script co...

s21sec-044-en.txt

S21Sec Advisory - Title: OpenDocMan Cross Site Scripting XSS ID: S21sec-044-en Severity: Low History: 15.Apr.2008 Vulnerability discovered 16.Apr.2008 Vendor contacted 27.May.2008 Patch available Scope: Cross Site Scripting XSS Platforms: Any Author: Sergi Roselló [email protected] URL:...

[Full-disclosure] S21SEC-044-en:OpenDocMan Cross Site Scripting (XSS)

S21Sec Advisory - Title: OpenDocMan Cross Site Scripting XSS ID: S21sec-044-en Severity: Low History: 15.Apr.2008 Vulnerability discovered 16.Apr.2008 Vendor contacted 27.May.2008 Patch available Scope: Cross Site Scripting XSS Platforms: Any Author: Sergi Rosell [email protected] URL:...

OpenDocMan 1.x - 'out.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29765/info OpenDocMan is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

CVE-2006-5655

SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-5655

SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-5655: Undefined Security Weakness

SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-5655

CVE-2006-5655 corresponds to an SQL injection vulnerability in OpenDocMan 1.2p3, where the username parameter is exploitable to allow remote attackers to execute arbitrary SQL commands. The vulnerability is described as affecting index.php and enables manipulation of the backend database. The ava...

opendocman <= 1.2p3 Bypass admin/user Login

opendocman = 1.2p3 Bypass admin/user Login affected to opendocman-1.2rc3 Download Source : http://www.opendocman.com/?pageid=14 Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; index.php bugs; $query = "SELECT id, username, password FROM user WHERE...