Parodia XSS vuln

Vuln. discovered by : r0t Date: 18 May 2007 vendor:http://parodia.net/ affected versions: v6.4 and prior Parodia contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the "strJobIDs" parameter in "candlogin.asp" isn't properly sanitised before being returned to the use...

CVE-2006-1005

agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AGID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in agencyprofile.asp in Parodia 6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the AGID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1004

Cross-site scripting XSS vulnerability in agencyprofile.asp in Parodia 6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the AGID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

Information disclosure

agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AGID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1005

agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AGID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1004

Cross-site scripting XSS vulnerability in agencyprofile.asp in Parodia 6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the AGID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1005

CVE-2006-1005 affects Parodia 6.2 and earlier. The issue is an information disclosure: remote attackers can cause an SQL error by supplying an invalid AG_ID parameter in agencyprofile.asp, which may reveal sensitive information. The vulnerability is described consistently across NVD/Red Hat/NVD m...

CVE-2006-1004

Parodia 6.2 and earlier contains a cross-site scripting (XSS) vulnerability in agencyprofile.asp exploitable via the AG_ID parameter. Remote attackers could inject arbitrary web script/HTML. The affected software version is Parodia 6.2 and earlier; the provided documents do not specify the root c...