EUVD-2008-2969

Malware in sbrugna...

EUVD-2008-2967

Malware in sbrugna...

EUVD-2008-2968

Malware in sbrugna...

ourvideo CMS 9.5 rss.php lfi Vulnerabilities

No description provided by source...

ourvideo CMS 9.5 phpi/login.php XSS Vulnerabilities

No description provided by source...

CVE-2008-2977

Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP code via a URL in the includeconnection parameter to 1 edittopfeature.php and 2 edittopicsfeature.php in phpi/...

CVE-2008-2978

Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the prefix parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote attackers to inject arbitrary web script or HTML via the 1 toppage and 2 endpage parameters...

Directory traversal

Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the prefix parameter...

CVE-2008-2979

Multiple cross-site scripting XSS vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote attackers to inject arbitrary web script or HTML via the 1 toppage and 2 endpage parameters...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP code via a URL in the includeconnection parameter to 1 edittopfeature.php and 2 edittopicsfeature.php in phpi/...

CVE-2008-2979

Multiple cross-site scripting XSS vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote attackers to inject arbitrary web script or HTML via the 1 toppage and 2 endpage parameters...

CVE-2008-2979

CVE-2008-2979 describes multiple cross-site scripting (XSS) vulnerabilities in the Ourvideo CMS 9.5, specifically in the file phpi/login.php. The flaw allows remote attackers to inject arbitrary web script or HTML by supplying crafted values for the top_page and end_page parameters. The NVD/relat...

CVE-2008-2978

CVE-2008-2978 concerns a directory traversal vulnerability in phpi/rss.php of Ourvideo CMS 9.5 that is exploitable when PHP register_globals is enabled. The issue allows remote attackers to include and execute arbitrary local files by manipulating directory traversal sequences in the prefix param...

CVE-2008-2978

Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the prefix parameter...

CVE-2008-2977

Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP code via a URL in the includeconnection parameter to 1 edittopfeature.php and 2 edittopicsfeature.php in phpi/...

CVE-2008-2977

Multiple PHP remote file inclusion vulnerabilities affect Ourvideo CMS 9.5. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL to the include_connection parameter in two files (edit_top_feature.php and edit_topics_feature.php) located in phpi/. Root cause: unvalidat...

CVE-2008-2978: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the prefix parameter...

CVE-2008-2979: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote attackers to inject arbitrary web script or HTML via the 1 toppage and 2 endpage parameters...

CVE-2008-2977: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP code via a URL in the includeconnection parameter to 1 edittopfeature.php and 2 edittopicsfeature.php in phpi/...