536 matches found
EUVD-2008-2011
Malware in sbrugna...
EUVD-2008-1592
Malware in sbrugna...
EUVD-2009-0728
Malware in sbrugna...
EUVD-2010-1733
Malware in sbrugna...
EUVD-2002-1994
Malware in sbrugna...
EUVD-2001-1498
Malware in sbrugna...
EUVD-2004-1949
Malware in sbrugna...
CVE-2004-2752
Cross-site scripting XSS vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action...
CVE-2005-2689
Multiple cross-site scripting XSS vulnerabilities in PostNuke 0.760-RC4b allows remote attackers to inject arbitrary web script or HTML via 1 the moderate parameter to the Comments module or 2 htmltext parameter to html/user.php...
CVE-2002-2015
PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter...
CVE-2005-2690
SQL injection vulnerability in the Downloads module in PostNuke 0.760-RC4b allows PostNuke administrators to execute arbitrary SQL commands via the show parameter to dl-viewdownload.php...
SUSE CVE-2006-0147
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...
PostNuke 0.76 RC2 Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18319/info PostNuke is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection vulnerabilities, because the application fails to properly sanitize user-supplied input. A...
PostNuke Phoenix 0.72x Rating System Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7702/info some submissions to the rating system. Because of this, a remote attacker may be able to submit a string that causes a denial of service to legitmate users...
PostNuke Phoenix 0.760 RC3 OP Parameter Remote Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13075/info A remote cross-site scripting vulnerability affects PostNuke. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web conten...
PostNuke Phoenix 0.760 RC3 Module Parameter Remote Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13076/info A remote cross-site scripting vulnerability affects PostNuke. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web conten...
PostNuke Phoenix 0.760 RC3 SID Parameter Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13077/info A remote SQL Injection vulnerability affects PostNuke Phoenix. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may...
PHP-Wiki 1.2/1.3 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5254/info PHP-Wiki does not sufficiently sanitize HTML from URI parameters, making it prone to cross-site scripting attacks. An attacker may exploit this condition by enticing users to visit a malicious link which contain...
PostNuke 0.703 caselist Arbitrary Module Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4381/info PostNuke is a content management system originally forked from the PHP-Nuke project. It is implemented in PHP, and available for Windows, Linux and other Unix based systems. A vulnerability has been reported in...
Michael Schatz Books 0.54/0.6 PostNuke Module Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5882/info Books is a module written for PostNuke. Reportedly, Books is prone to cross site scripting attacks. An attacker may exploit this vulnerability by enticing a victim user to follow a malicious link containing HTML...