508 matches found
rps-include.txt
Advisory 13 Title: Multiple Vulnerabilities RPS rigter portal system Author: 0ozeuso0 Arturo Z. Contact: [email protected] Website: www.elitemexico.org Date: 18/07/06 Risk: medium Vendor Url: http://rps.rigtersir.com/ Affected Software: RPS Non Affected: RPS V 4 Info: UPLOAD FILES it allows th...
Cross site scripting
Cross-site scripting XSS vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2846
Cross-site scripting XSS vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2846
Cross-site scripting XSS vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2846
CVE-2006-2846 describes a Cross-site scripting (XSS) vulnerability in the VisionGate Portal System, specifically in Print.PHP. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. The underlying root cause is an XSS flaw in the Print.PHP component; ...
CVE-2006-2846: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimera Web Portal System 0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 commentposter, 2 commentposteremail, 3 commentposterhomepage, and 4 commenttext...
CVE-2006-0136
Phanatic Software’s Chimera Web Portal System 0.2 is affected by multiple cross-site scripting (XSS) vulnerabilities in the guestbook module (modules.php). The flaw allows remote attackers to inject arbitrary script or HTML via the comment_poster, comment_poster_email, comment_poster_homepage, or...
CVE-2006-0136
Multiple cross-site scripting XSS vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimera Web Portal System 0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 commentposter, 2 commentposteremail, 3 commentposterhomepage, and 4 commenttext...
CVE-2006-0137
CVE-2006-0137 describes an SQL injection in Chimera Web Portal System 0.2, specifically in linkcategory.php where the id parameter can be used by a remote attacker to execute arbitrary SQL commands. The linked CPAI advisories confirm the vulnerability as SQL injection in the Chimera Web Portal Sy...
CVE-2006-0137: Undefined Security Weakness
SQL injection vulnerability in linkcategory.php in Phanatic Softwares Chimera Web Portal System 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-0136: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimera Web Portal System 0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 commentposter, 2 commentposteremail, 3 commentposterhomepage, and 4 commenttext...
EV0007.txt
New eVuln Advisory: Chimera Web Portal System Multiple Vulnerabilities --------------------Summary---------------- Vendor: Phanatic Softwares http://www.psoftwares.f2s.com/ Software: Chimera Web Portal System http://sourceforge.net/projects/chimera/ Versions: 0.2 Critical Level: Moderate Type:...
[eVuln] Chimera Web Portal System Multiple Vulnerabilities
New eVuln Advisory: Chimera Web Portal System Multiple Vulnerabilities --------------------Summary---------------- Vendor: Phanatic Softwares http://www.psoftwares.f2s.com/ Software: Chimera Web Portal System http://sourceforge.net/projects/chimera/ Versions: 0.2 Critical Level: Moderate Type:...
CVE-2005-4337
The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified userid parameter and a "/" in the encodedpw parameter...
CVE-2005-4341
Blackboard Learning and Community Portal System in Academic Suite before version 6 is affected by CVE-2005-4341. The issue arises in category.pl where a blank category_id parameter allows remote attackers to list all categories, constituting information disclosure (confidentiality impact: partial...
CVE-2005-4337
The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified userid parameter and a "/" in the encodedpw parameter...
CVE-2005-4337: Undefined Security Weakness
The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified userid parameter and a "/" in the encodedpw parameter...
CVE-2005-4339: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to inject arbitrary web script or HTML via the context parameter to announcement.pl, which is reflected in the...
CVE-2005-4338: Undefined Security Weakness
announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to gain administrator privileges by setting the context parameter to "admin"...