CVE-2007-0259

CVE-2007-0259 affects Ezboxx Portal System Beta 0.7.6 and earlier. The vulnerability arises from an invalid cat parameter to the boxx/knowledgebase.asp page, causing an error message that reveals the server path. This exposes sensitive information to remote attackers. Exploitation details, affect...

CVE-2007-0266

CVE-2007-0266 affects Ezboxx Portal System Beta 0.7.6 and earlier, where the boxx/ShowAppendix.asp component is vulnerable to SQL injection via the iid parameter. The vulnerability can allow a remote attacker to inject arbitrary web script or HTML. Documents consistently describe the affected fil...

CVE-2007-0265

CVE-2007-0265 concerns Ezboxx Portal System Beta 0.7.6 and earlier, where multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary script/HTML via (1) pic parameter in custom/piczoom.asp, (2) nocatname parameter in boxx/user-upload.asp, or (3) iid parameter i...

CVE-2007-0265

Multiple cross-site scripting XSS vulnerabilities in Ezboxx Portal System Beta 0.7.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the pic parameter to custom/piczoom.asp, 2 the nocatname parameter to boxx/user-upload.asp, or 3 the iid parameter to...

CVE-2007-0266: Undefined Security Weakness

SQL injection vulnerability in boxx/ShowAppendix.asp in Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the iid parameter...

CVE-2007-0265: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Ezboxx Portal System Beta 0.7.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the pic parameter to custom/piczoom.asp, 2 the nocatname parameter to boxx/user-upload.asp, or 3 the iid parameter to...

CVE-2007-0259: Exposure of Sensitive Information to an Unauthorized Actor

Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message...

Ezboxx multiple vulnerabilities.

Ezboxx multiple vulnerabilities. Vulnerable version: Ezboxx Portal System Beta v 0.7.6 and below. The Ezboxx Portal System Beta v 0.7.6 and below versions are vulnerable to Cross-site scripting, Path disclosure and SQL Injection attacks. Cross-site scripting: ---------------------- Description:...

CVE-2006-6722

Bandwebsite aka Bandsite portal system 1.5 allows remote attackers to create administrative accounts via a direct request to admin.php with the Login parameter set to 1...

CVE-2006-6722

CVE-2006-6722 affects Bandwebsite (Bandsite portal system) 1.5. Remote attackers can create administrative accounts by issuing a direct request to admin.php with the Login parameter set to 1. This is a network‑level issue with low attack complexity and no authentication required, allowing partial...

CVE-2006-6722

Bandwebsite aka Bandsite portal system 1.5 allows remote attackers to create administrative accounts via a direct request to admin.php with the Login parameter set to 1...

Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit

No description provided by source. !-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting...

Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit

Exploit for unknown platform in category web applications =================================================== Bandwebsite Name: Pass: 0day.today 2018-03-28...

Bandsite portal system Admin Added Access

!-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting, audio sections, guestbook, tour...

Bandwebsite 1.5 - LOGIN Remote Add Admin

Bandwebsite 1.5 - LOGIN Remote Add Admin Name: Pass: milw0rm.com 2006-12-16...

Bandwebsite 1.5 - 'LOGIN' Remote Add Admin

Name: Pass: milw0rm.com 2006-12-16...

CVE-2006-4923

Cross-site scripting XSS vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arbitrary web script or HTML via the what parameter...

CVE-2006-4923

Cross-site scripting XSS vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arbitrary web script or HTML via the what parameter...

CVE-2006-4923: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arbitrary web script or HTML via the what parameter...

eSyndiCat Portal System XSS Vuln.

eSyndiCat Portal System has an xss bug in search.php can be exploited from web interface http://www.example.com/path/search.php?what=xss&searchtop.x=0&searchtop.y=0&searchtop=GO -------------------- Discovered by meto5757 Rootshell Security Group...