CVE-2005-4692: Undefined Security Weakness

Unspecified vulnerability in mroovca stats mroovcastats before 0.4.5b has unknown attack vectors and impact, related to cookies...

CVE-2006-0238

SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL commands via the author parameter...

Sql injection

SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL commands via the author parameter...

CVE-2006-0238

SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL commands via the author parameter...

CVE-2006-0238

CVE-2006-0238 affects GaMerZ WP-Stats 2.0. The WP component wp-stats.php is vulnerable to SQL injection via the author parameter, allowing remote attackers to execute arbitrary SQL commands. No additional exploit details or remediation are provided in the connected documents.

CVE-2006-0238: Undefined Security Weakness

SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL commands via the author parameter...

[SA18471] WP-Stats WordPress Plug-in "author" SQL Injection Vulnerability

TITLE: WP-Stats WordPress Plug-in "author" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18471 VERIFY ADVISORY: http://secunia.com/advisories/18471/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: WP-Stats 2.x http://secunia.com/product/6822/...

CVE-2005-4642

Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...

CVE-2005-4692

Unspecified vulnerability in mroovca stats mroovcastats before 0.4.5b has unknown attack vectors and impact, related to cookies...

PT-2005-3706 · Maxdev · Maxdev Md-Pro

Name of the Vulnerable Software and Affected Versions: MAXdev MD-Pro versions 1.0.72 and earlier Description: The issue affects one or more modules in MAXdev MD-Pro, including the Download, Search, Web links, Blocks, Messages, News, Comments, Settings, Stats, or subjects modules. The impact and...

CVE-2005-2840: Undefined Security Weakness

Multiple unknown vulnerabilities in MAXdev MD-Pro 1.0.72 and earlier have unknown impact and unspecified attack vectors, in one or more of the 1 Download, 2 Search, 3 Web links, 4 Blocks, 5 Messages, 6 News, 7 Comments, 8 Settings, 9 Stats or 10 subjects modules...

CVE-2005-2484

Buffer overflow in the rdbquery function for Denora IRC Stats 1.0 might allow attackers to execute arbitrary code...

CVE-2005-2484

The CVE-2005-2484 issue concerns Denora IRC Stats 1.0, where a buffer overflow in the rdb_query function could allow an attacker to execute arbitrary code. The available sources state this vulnerability and its potential to impact confidentiality, integrity, and availability, but do not provide c...

CVE-2005-2484

Buffer overflow in the rdbquery function for Denora IRC Stats 1.0 might allow attackers to execute arbitrary code...

CVE-2005-2484: Undefined Security Weakness

Buffer overflow in the rdbquery function for Denora IRC Stats 1.0 might allow attackers to execute arbitrary code...

[SA16281] Denora IRC Stats "rdb_query()" Buffer Overflow Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2002-2057

TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/memberlog.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...

CVE-2005-1508

Multiple cross-site scripting XSS vulnerabilities in PwsPHP 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 month or 2 annee parameters to the news module, 3 nbractif or 4 annee parameters to the stats module, 5 id parameter to profil.php, 6 mblettre or 7 lettre...

CVE-2005-1508

PWSPHP (Portail Web System) is affected by cross-site scripting (XSS) in version 1.2.2 due to insufficient input validation in multiple modules/parameters (e.g., news, stats, profil.php, memberlist, recherche) and specifically the SettingsBase.php skin parameter per the NASL entry. The vulnerabil...

CVE-2005-1508

Multiple cross-site scripting XSS vulnerabilities in PwsPHP 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 month or 2 annee parameters to the news module, 3 nbractif or 4 annee parameters to the stats module, 5 id parameter to profil.php, 6 mblettre or 7 lettre...