182 matches found
CVE-2003-1204
CVE-2003-1204 involves multiple cross-site scripting (XSS) flaws in Mambo Site Server 4.0.12 BETA and earlier. The authenticated-remote issue allows attackers to inject script via various parameters across several PHP scripts (sectionswindow.php, gallery.php, navigation.php, uploadimage.php, view...
CVE-2002-1662
CVE-2002-1662 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11. The issues allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the "Your name" field during account registration. This is described in the NVD e...
CVE-2003-1203
Cross-site scripting XSS vulnerability in index.php for Mambo Site Server 4.0.10 allows remote attackers to execute script on other clients via the ?option parameter...
CVE-2003-1204
Multiple cross-site scripting XSS vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via 1 the link parameter in sectionswindow.php, the directory parameter in 2 gallery.php, 3 navigation.php, or 4 uploadimage.php, the path...
CVE-2003-1203
CVE-2003-1203 affects Mambo Site Server 4.0.10. A cross-site scripting vulnerability exists in index.php via the ?option parameter, enabling remote attackers to run script in other clients. OpenVAS entries document the XSS issue; NVD/NVD-derived entries confirm the same. No remediation or fix ver...
CVE-2002-1662
Multiple cross-site scripting XSS vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via 1 search.php and 2 the "Your name" field during account registration...
CVE-2003-1203: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php for Mambo Site Server 4.0.10 allows remote attackers to execute script on other clients via the ?option parameter...
CVE-2003-1204: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via 1 the link parameter in sectionswindow.php, the directory parameter in 2 gallery.php, 3 navigation.php, or 4 uploadimage.php, the path...
CVE-2002-1662: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via 1 search.php and 2 the "Your name" field during account registration...
Mambo Site Server mos_change_template XSS
An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting attack on this host because of its failure to sanitize input to the 'return' and 'moschangetemplate' parameters of the 'index.php' script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Mambo Site Server Multiple Vulnerabilities
An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting attack on this host or execute arbitrary code through the gallery image uploader under the administrator directory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...
CVE-1999-1520
A configuration problem in the Ad Server Sample directory AdSamples in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information...
CVE-1999-1520
The CVE-1999-1520 issue is a configuration problem in the Ad Server Sample directory (AdSamples) of Microsoft Site Server 3.0. The root cause is misconfiguration that allows an attacker to obtain the SITE.CSC file, exposing sensitive SQL database information. Affected software: Microsoft Site Ser...
CVE-1999-1520: Undefined Security Weakness
A configuration problem in the Ad Server Sample directory AdSamples in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information...
Mambo Site Server itemid Parameter XSS
An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting attack on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid12045; scriptversion"1.20";...
CVE-2003-1204
Multiple cross-site scripting XSS vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via 1 the link parameter in sectionswindow.php, the directory parameter in 2 gallery.php, 3 navigation.php, or 4 uploadimage.php, the path...
Mambo Site Server 4.0.14 - banners.php?bid SQL Injection
Mambo Site Server 4.0.14 - banners.php?bid SQL Injection source: https://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database querie...
Mambo Site Server 4.0.14 - 'emailarticle.php?id' SQL Injection
source: https://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous e-mail to arbitrary users. The...
Mambo Site Server 4.0.14 - 'contact.php' Unauthorized Mail Relay
source: https://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous e-mail to arbitrary users. The...
Mambo Site Server 4.0.10 XSS
An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting attack on this host. %NASLMINLEVEL 70300 This script was completely rewritten by Tenable Network Security, using a new API Message-ID: From: Ertan Kurt To: Subject: Some XSS vulns...