CVE-2006-1968

CVE-2006-1968 describes a cross-site scripting (XSS) vulnerability in KCScripts News Publisher (Portal Pack 6.0 and earlier) affecting the news/NsVisitor.cgi component. The issue arises from the sort_order parameter, allowing remote attackers to inject arbitrary web script or HTML. Public sources...

CVE-2006-1968

Cross-site scripting XSS vulnerability in news/NsVisitor.cgi in KCScripts News Publisher, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...

[SA19727] @1 Event Publisher Multiple Vulnerabilities

TITLE: @1 Event Publisher Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19727 VERIFY ADVISORY: http://secunia.com/advisories/19727/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: @1 Event Publisher...

[SA19723] @1 Table Publisher Script Insertion Vulnerability

TITLE: @1 Table Publisher Script Insertion Vulnerability SECUNIA ADVISORY ID: SA19723 VERIFY ADVISORY: http://secunia.com/advisories/19723/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: @1 Table Publisher http://secunia.com/product/9472/ DESCRIPTION: Jericho ha...

Sql injection

SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter...

CVE-2006-1852

SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter...

CVE-2006-1852

SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter...

CVE-2006-1852

The CVE-2006-1852 entry documents a SQL injection in the PHP file category.php of Article Publisher Pro versions ≤ 1.0.1. The vulnerability allows a remote attacker to inject arbitrary SQL through the cname parameter, enabling potential data disclosure/ modification and compromising the applicati...

Article Publisher 1.0.1 Pro - Multiple SQL Injections

Article Publisher 1.0.1 Pro - Multiple SQL Injections source: https://www.securityfocus.com/bid/17595/info Article Publisher Pro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...

Article Publisher 1.0.1 Pro - Multiple SQL Injections

source: https://www.securityfocus.com/bid/17595/info Article Publisher Pro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker...

Cross site scripting

Cross-site scripting XSS vulnerability in tablepublisher.cgi in UPDI Network Enterprise @1 Table Publisher 2006-03-23 allows remote attackers to inject arbitrary web script or HTML via the Title of Table field...

CVE-2006-1795

CVE-2006-1795 describes a cross-site scripting (XSS) vulnerability in UPDI Network Enterprise @1 Table Publisher, specifically in the tablepublisher.cgi handling of the Title of Table field. The flaw allows remote attackers to inject arbitrary web script or HTML via that field. The NVD-provided C...

CVE-2006-1436

Multiple cross-site scripting XSS vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the 1 Event, 2 Description, 3 Time, 4 Website, and 5 Public Remarks fields to a eventpublisheradmin.htm and b eventpublisherusersubmit.htm...

CVE-2006-1437

UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eventpublisher.txt...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the 1 Event, 2 Description, 3 Time, 4 Website, and 5 Public Remarks fields to a eventpublisheradmin.htm and b eventpublisherusersubmit.htm...

CVE-2006-1436

Multiple cross-site scripting XSS vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the 1 Event, 2 Description, 3 Time, 4 Website, and 5 Public Remarks fields to a eventpublisheradmin.htm and b eventpublisherusersubmit.htm...

CVE-2006-1437

UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eventpublisher.txt...

CVE-2006-1437

The CVE-2006-1437 entry concerns UPOINT @1 Event Publisher where sensitive information is stored under the web document root with insufficient access control. This allows remote attackers to read private comments by requesting eventpublisher.txt directly. Concrete details present in connected reco...

CVE-2006-1436

CVE-2006-1436 describes multiple cross-site scripting (XSS) vulnerabilities in the UPOINT @1 Event Publisher. The issue allows remote attackers to inject arbitrary web script or HTML via the following fields: Event, Description, Time, Website, and Public Remarks, targeting both the admin page (ev...

Clansys v.1.1 (showid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== Clansys v.1.1 showid Remote SQL Injection Exploit =================================================== Internet Security |...