3627 matches found
Article Publisher 1.0.1 Pro - Multiple SQL Injections
Article Publisher 1.0.1 Pro - Multiple SQL Injections source: https://www.securityfocus.com/bid/17595/info Article Publisher Pro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...
Cross site scripting
Cross-site scripting XSS vulnerability in tablepublisher.cgi in UPDI Network Enterprise @1 Table Publisher 2006-03-23 allows remote attackers to inject arbitrary web script or HTML via the Title of Table field...
CVE-2006-1795
CVE-2006-1795 describes a cross-site scripting (XSS) vulnerability in UPDI Network Enterprise @1 Table Publisher, specifically in the tablepublisher.cgi handling of the Title of Table field. The flaw allows remote attackers to inject arbitrary web script or HTML via that field. The NVD-provided C...
CVE-2006-1795: Undefined Security Weakness
Cross-site scripting XSS vulnerability in tablepublisher.cgi in UPDI Network Enterprise @1 Table Publisher 2006-03-23 allows remote attackers to inject arbitrary web script or HTML via the Title of Table field...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the 1 Event, 2 Description, 3 Time, 4 Website, and 5 Public Remarks fields to a eventpublisheradmin.htm and b eventpublisherusersubmit.htm...
CVE-2006-1436
Multiple cross-site scripting XSS vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the 1 Event, 2 Description, 3 Time, 4 Website, and 5 Public Remarks fields to a eventpublisheradmin.htm and b eventpublisherusersubmit.htm...
CVE-2006-1437
UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eventpublisher.txt...
CVE-2006-1437
The CVE-2006-1437 entry concerns UPOINT @1 Event Publisher where sensitive information is stored under the web document root with insufficient access control. This allows remote attackers to read private comments by requesting eventpublisher.txt directly. Concrete details present in connected reco...
CVE-2006-1436
CVE-2006-1436 describes multiple cross-site scripting (XSS) vulnerabilities in the UPOINT @1 Event Publisher. The issue allows remote attackers to inject arbitrary web script or HTML via the following fields: Event, Description, Time, Website, and Public Remarks, targeting both the admin page (ev...
CVE-2006-1436
Multiple cross-site scripting XSS vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the 1 Event, 2 Description, 3 Time, 4 Website, and 5 Public Remarks fields to a eventpublisheradmin.htm and b eventpublisherusersubmit.htm...
CVE-2006-1437
UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eventpublisher.txt...
CVE-2006-1436: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the 1 Event, 2 Description, 3 Time, 4 Website, and 5 Public Remarks fields to a eventpublisheradmin.htm and b eventpublisherusersubmit.htm...
CVE-2006-1437: Undefined Security Weakness
UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eventpublisher.txt...
Clansys v.1.1 (showid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== Clansys v.1.1 showid Remote SQL Injection Exploit =================================================== Internet Security |...
CVE-2005-4743
The CVE-2005-4743 vulnerability concerns NeLogic Nephp Publisher 4.5.2 and earlier, where SQL injection is possible in index.php via the parameters (1) id and (2) nnet_catid). The underlying issue is improper handling of user-supplied input, enabling remote attackers to execute arbitrary SQL comm...
CVE-2005-4743
Multiple SQL injection vulnerabilities in index.php in NeLogic Nephp Publisher 4.5.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 nnetcatid parameters...
CVE-2005-4743: Undefined Security Weakness
Multiple SQL injection vulnerabilities in index.php in NeLogic Nephp Publisher 4.5.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 nnetcatid parameters...
KnowledgebasePublisher 1.2 (include) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl KnowledgebasePublisher 1.2 Remote Code Execution Exploit Bug Found By uid0 c 2006 ExploiterCode.com usage: perl knowledgebase.pl location of KnowledgebasePublisher cmd shell location cmd shell variable perl knowledgebase.pl...