CVE-2005-4743

The CVE-2005-4743 vulnerability concerns NeLogic Nephp Publisher 4.5.2 and earlier, where SQL injection is possible in index.php via the parameters (1) id and (2) nnet_catid). The underlying issue is improper handling of user-supplied input, enabling remote attackers to execute arbitrary SQL comm...

CVE-2005-4743

Multiple SQL injection vulnerabilities in index.php in NeLogic Nephp Publisher 4.5.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 nnetcatid parameters...

KnowledgebasePublisher 1.2 (include) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl KnowledgebasePublisher 1.2 Remote Code Execution Exploit Bug Found By uid0 c 2006 ExploiterCode.com usage: perl knowledgebase.pl location of KnowledgebasePublisher cmd shell location cmd shell variable perl knowledgebase.pl...

Design/Logic Flaw

Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact and attack vectors...

CVE-2006-0979

Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact and attack vectors...

CVE-2006-0979

Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact and attack vectors...

[SA19018] Issue Dealer Unpublished Content Disclosure Weakness

TITLE: Issue Dealer Unpublished Content Disclosure Weakness SECUNIA ADVISORY ID: SA19018 VERIFY ADVISORY: http://secunia.com/advisories/19018/ CRITICAL: Not critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Issue Dealer 0.x http://secunia.com/product/8384/ DESCRIPTION: A weakness has...

Buffer overflow

Buffer overflow in BitComet Client 0.60 allows remote attackers to execute arbitrary code, when the publisher's name link is clicked, via a long publisher URI in a torrent file...

CVE-2006-0339

Buffer overflow in BitComet Client 0.60 allows remote attackers to execute arbitrary code, when the publisher's name link is clicked, via a long publisher URI in a torrent file...

CVE-2006-0339

Buffer overflow in BitComet Client 0.60 allows remote attackers to execute arbitrary code, when the publisher's name link is clicked, via a long publisher URI in a torrent file...

CVE-2005-4743

Multiple SQL injection vulnerabilities in index.php in NeLogic Nephp Publisher 4.5.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 nnetcatid parameters...

Nephp Publisher v4.5.x SQL inj. vuln.

Nephp Publisher v4.5.x SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/nephp-publisher-v45x-sql-inj-vuln.html Vendor:www.nelogic.com/cms/07-11-2005/19-nephp-publisher.html affected version:v4.5.2 and prior Product Description: a...

Nelogic Nephp Publisher 4.5.2 - SQL Injection

Nelogic Nephp Publisher 4.5.2 - SQL Injection source: https://www.securityfocus.com/bid/15584/info Nelogic Nephp Publisher is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Nelogic Nephp Publisher 4.5.2 - SQL Injection

source: https://www.securityfocus.com/bid/15584/info Nelogic Nephp Publisher is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromi...

CVE-2005-2698

Cross-site scripting XSS vulnerability in browse.php in Nephp Publisher Enterprise 3.04 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded keywords parameter...

CVE-2005-2698

CVE-2005-2698 describes a cross-site scripting (XSS) vulnerability in Nephp Publisher Enterprise 3.04, affecting the file/browse.php. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a hex-encoded value for the keywords parameter. The vulnerability could impac...

CVE-2005-2698

Cross-site scripting XSS vulnerability in browse.php in Nephp Publisher Enterprise 3.04 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded keywords parameter...

nephp304.txt

Program Name : Nephp Publisher Enterprise Release Version : 3.04 Home : http://www.nephp.com Type : Validation Description : Vulnerable to Cross Site Scripting XSS attacks. ------------------------------------------------------------------------- example :...

Nephp Publisher Enterprise 3.04 Cross Site Scripting

Program Name : Nephp Publisher Enterprise Release Version : 3.04 Home : http://www.nephp.com Type : Validation Description : Vulnerable to Cross Site Scripting XSS attacks. ------------------------------------------------------------------------- example :...

CVE-2002-1727

CVE-2002-1727 is a cross-site scripting (XSS) vulnerability in the askSam Web Publisher 1 and 4 products, specifically in the executables as_web.exe and as_web4.exe . The issue allows remote attackers to execute arbitrary script in the context of other users by supplying a crafted URL. The vulner...