EUVD-2012-4209

Malware in sbrugna...

EUVD-2012-4210

Malware in sbrugna...

CVE-2012-4265

SQL injection vulnerability in categoryedit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2012-4266

Cross-site scripting XSS vulnerability in clientdetails.php in Proman Xpress 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the clcomments parameter. NOTE: some of these details are obtained from third party information...

Proman Xpress 5.0.1 - Multiple Vulnerabilities

No description provided by source...

CVE-2012-4265

SQL injection vulnerability in categoryedit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2012-4266

Cross-site scripting XSS vulnerability in clientdetails.php in Proman Xpress 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the clcomments parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in categoryedit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in clientdetails.php in Proman Xpress 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the clcomments parameter. NOTE: some of these details are obtained from third party information...

CVE-2012-4265

CVE-2012-4265 describes an SQL injection vulnerability in the PHP script category_edit.php of Proman Xpress 5.0.1. The flaw allows remote attackers to execute arbitrary SQL commands through the cid parameter. This is documented across multiple sources (NVD/Red Hat/CVE list) with the same affected...

CVE-2012-4266

CVE-2012-4266 is an XSS vulnerability in Proman Xpress 5.0.1, exploitable via the cl_comments parameter in client_details.php. The issue allows remote attackers to inject arbitrary script/HTML. Affected component is the web page logic handling cl_comments, with no documented broader impact beyond...

CVE-2012-4266

Cross-site scripting XSS vulnerability in clientdetails.php in Proman Xpress 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the clcomments parameter. NOTE: some of these details are obtained from third party information...

CVE-2012-4265

SQL injection vulnerability in categoryedit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2012-4265: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in categoryedit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2012-4266: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in clientdetails.php in Proman Xpress 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the clcomments parameter. NOTE: some of these details are obtained from third party information...

PT-2012-5294

Name of the Vulnerable Software and Affected Versions Proman Xpress version 5.0.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the cl comments parameter in the client details.php file. Recommendations F...

PT-2012-5293

Name of the Vulnerable Software and Affected Versions Proman Xpress version 5.0.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cid parameter in the category edit.php file. Recommendations For Proman Xpress version 5.0.1, consider...

Proman Xpress 5.0.1 - Multiple Vulnerabilities

Proman Xpress 5.0.1 - Multiple Vulnerabilities Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=513 VL-ID: ===== 512 Common Vulnerability Scoring System:...

Proman Xpress 5.0.1 SQL Injection / XSS

Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=513 VL-ID: ===== 512 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= Proman...

Proman Xpress 5.0.1 - Multiple Vulnerabilities

Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=513 VL-ID: ===== 512 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= Proman...