PostNuke Phoenix 0.7x - CATID SQL Injection

PostNuke Phoenix 0.7x - CATID SQL Injection source: https://www.securityfocus.com/bid/12683/info PostNuke Phoenix is reported prone to an SQL injection vulnerability. This issue arises due to insufficient sanitization of user-supplied input. It is reported that issue presents itself when maliciou...

PostNuke Phoenix 0.7x - 'CATID' SQL Injection

source: https://www.securityfocus.com/bid/12683/info PostNuke Phoenix is reported prone to an SQL injection vulnerability. This issue arises due to insufficient sanitization of user-supplied input. It is reported that issue presents itself when malicious SQL syntax is issued to the application...

PostNuke Phoenix 0.7x - 'SHOW' SQL Injection

source: https://www.securityfocus.com/bid/12684/info PostNuke Phoenix is reported prone to an SQL injection vulnerability. This issue arises due to insufficient sanitization of user-supplied input. It is reported that issue presents itself when malicious SQL syntax is issued to the application...

uofpConfig.txt

University of Phoenix Outlook Express Unauthorized Configuration Manipulation Vendor Homepage: http://www.phoenix.edu Discovered by: Adam Baldwin [email protected] www.evilpacket.net\advisories\EP-000-0002.html Discovery Date: 1.17.2005 File Name: PhxStudent15.ocx Vulnerable Version:...

CVE-2004-2051

The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL...

PostNuke Phoenix 0.726 - openwindow.php?hlpfile Cross-Site Scripting

PostNuke Phoenix 0.726 - openwindow.php?hlpfile Cross-Site Scripting source: https://www.securityfocus.com/bid/10191/info Multiple vulnerabilities were reported to exist in PostNuke Phoenix. The following specific vulnerabilities were reported: - Multiple path disclosure vulnerabilities that occu...

PostNuke Phoenix 0.72x - Rating System Denial of Service

PostNuke Phoenix 0.72x - Rating System Denial of Service source: https://www.securityfocus.com/bid/7702/info some submissions to the rating system. Because of this, a remote attacker may be able to submit a string that causes a denial of service to legitmate users...

PostNuke 0.72x Phoenix Glossary Module - SQL Injection

PostNuke 0.72x Phoenix Glossary Module - SQL Injection source: https://www.securityfocus.com/bid/7697/info A vulnerability has been discovered in PostNuke Phoenix v0.723 and earlier. Specifically, the Glossary module fails to sufficiently sanitize user-supplied input, making it prone to SQL...

PostNuke Phoenix 0.72x - Rating System Denial of Service

source: https://www.securityfocus.com/bid/7702/info some submissions to the rating system. Because of this, a remote attacker may be able to submit a string that causes a denial of service to legitmate users...