CVE-2010-2858

Multiple cross-site scripting XSS vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 layout and 2 sortorder parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 layout and 2 sortorder parameters...

Design/Logic Flaw

news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the installation path in an error message...

CVE-2010-2859

news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the installation path in an error message...

CVE-2010-2858

SimpNews (versions up to 2.47.03) is affected by multiple XSS vulnerabilities in news.php, enabling remote attackers to inject arbitrary script or HTML via the layout and sortorder parameters. The issue arises from insufficient input sanitization, allowing reflected or stored-like XSS depending o...

CVE-2010-2859

SimpNews is affected: versions up to 2.47.3 contain an information disclosure via an invalid lang parameter in news.php that reveals the installation path in an error message. Affected component: news.php handling in SimpNews prior to or equal to 2.47.3. Root cause: error message disclosure of fi...

CVE-2010-2858

Multiple cross-site scripting XSS vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 layout and 2 sortorder parameters...

CVE-2010-2859: Exposure of Sensitive Information to an Unauthorized Actor

news.php in SimpNews 2.47.3 and earlier allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the installation path in an error message...

CVE-2010-2858: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 layout and 2 sortorder parameters...

Vulnerabilities in SimpNews

Hello Bugtraq! I want to warn you about security vulnerabilities in SimpNews. ----------------------------- Advisory: Vulnerabilities in SimpNews ----------------------------- URL: http://websecurity.com.ua/4245/ ----------------------------- Affected products: SimpNews V2.47.03 and previous...

SimpNews 2.47.3 - Multiple Cross-Site Scripting Vulnerabilities

SimpNews 2.47.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41517/info SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...

SimpNews 2.47.3 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41517/info SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script cod...

SimpNews 2.47.03 Cross Site Scripting

Hello Full-Disclosure! I want to warn you about security vulnerabilities in SimpNews. ----------------------------- Advisory: Vulnerabilities in SimpNews ----------------------------- URL: http://websecurity.com.ua/4245/ ----------------------------- Affected products: SimpNews V2.47.03 and...

SimpNews 2.16.2 - Multiple SQL Injections

SimpNews 2.16.2 - Multiple SQL Injections ============================================================================================================== o SimpNews Multiple SQL Injection Vulnerabilities Software : SimpNews version 2.16.2 and below Vendor : http://www.boesch-it.de/ Author : NoGe...

SimpNews 2.16.2 SQL Injection

============================================================================================================== o SimpNews Multiple SQL Injection Vulnerabilities Software : SimpNews version 2.16.2 and below Vendor : http://www.boesch-it.de/ Download :...

SimpNews 2.16.2 and Below Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications ================================================================ SimpNews 2.16.2 and Below Multiple SQL Injection Vulnerabilities ================================================================...

SimpNews 2.16.2 - Multiple SQL Injections

============================================================================================================== o SimpNews Multiple SQL Injection Vulnerabilities Software : SimpNews version 2.16.2 and below Vendor : http://www.boesch-it.de/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog :...

Design/Logic Flaw

SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain linkdate parameter to events.php, which reveals the path in an error message due to an unsupported argument type for the mktime function on Windows...

Design/Logic Flaw

SimpNews 2.41.03 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php; or a direct request to 2 admin/dbginfos.php, 3 admin/heading.php, or 4 evsearch.php; which reveals the path in various error messages...

CVE-2007-4872

SimpNews 2.41.03 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php; or a direct request to 2 admin/dbginfos.php, 3 admin/heading.php, or 4 evsearch.php; which reveals the path in various error messages...