SimpNews 2.41.3 - l_username Cross-Site Scripting

SimpNews 2.41.3 - lusername Cross-Site Scripting source: https://www.securityfocus.com/bid/25809/info SimpNews is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute...

SimpNews 2.41.3 - 'backurl' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25809/info SimpNews is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

SimpNews 2.41.3 - backurl Cross-Site Scripting

SimpNews 2.41.3 - backurl Cross-Site Scripting source: https://www.securityfocus.com/bid/25809/info SimpNews is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute...

SimpNews 2.41.3 - 'l_username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25809/info SimpNews is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

simpnews-sql.txt

!/usr/bin/perl -w SimpNews = 2.40.01 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code print.php: $sql = "select from ".$tableprefix."data where newsnr=$newsnr"; PoC:...

SimpNews <= 2.40.01 (print.php newnr) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w SimpNews = 2.40.01 SQL Injection Exploit Discovered by: Silentz &nbs...

Sql injection

SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary SQL commands via the newsnr parameter...

CVE-2007-2750

SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary SQL commands via the newsnr parameter...

CVE-2007-2750

SQL injection vulnerability in print.php of SimpNews versions up to 2.40.01 allows remote attackers to execute arbitrary SQL commands via the newsnr parameter. Affected component: print.php in SimpNews. Root cause: unsafeguarded input handling for the newsnr parameter leading to SQL injection. Im...

CVE-2007-2750

SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary SQL commands via the newsnr parameter...

CVE-2007-2750: Undefined Security Weakness

SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary SQL commands via the newsnr parameter...

SimpNews 2.40.01 - 'newnr' SQL Injection

!/usr/bin/perl -w SimpNews = 2.40.01 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code print.php: $sql = "select from ".$tableprefix."data where newsnr=$newsnr"; PoC:...

SimpNews <= 2.40.01 (print.php newnr) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== SimpNews = 2.40.01 print.php newnr Remote SQL Injection Exploit ================================================================== !/usr/bin/perl -w SimpNews = 2.40.01 SQL...

CVE-2006-5530

Multiple cross-site scripting XSS vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 admin/index.php, 2 admin/pwlost.php, and unspecified other files. NOTE: the provenance of this information is unknown;...

CVE-2006-5530

Multiple cross-site scripting XSS vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 admin/index.php, 2 admin/pwlost.php, and unspecified other files. NOTE: the provenance of this information is unknown;...

CVE-2006-5530

Boesch SimpNews prior to 2.34.01 is affected by multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to admin/index.php, admin/pwlost.php, and other files. Root cause is cited as XSS but the detail...

CVE-2006-5530: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 admin/index.php, 2 admin/pwlost.php, and unspecified other files. NOTE: the provenance of this information is unknown;...

Simpnews 2.x - pwlost.php Cross-Site Scripting

Simpnews 2.x - pwlost.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20714/info SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script...

Simpnews 2.x - index.php Cross-Site Scripting

Simpnews 2.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20714/info SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script...

Simpnews 2.x - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20714/info SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting...