CVE-2004-2162

Multiple cross-site scripting XSS vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via 1 the search field of the Address Module or 2 the t parameter to appnew.php...

CVE-2004-2161

SQL injection vulnerability in fileoverview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

Vulnerabilities in TUTOS

--------------------------------------------------------------------------- Multiple Vulnerabilities in TUTOS --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2004 Location: Basque Country...

TUTOS < 1.1.20040412 Multiple Input Validation Issues

The remote host is running Tutos, an open source team organization software package written in PHP. According to its banner, the remote version of this software is vulnerable to multiple input validation flaws that could allow an authenticated user to perform a cross-site scripting attack, path...

Tutos Multiple Vulnerabilities

Binary data 2308.prm...

TUTOS < 1.2 Multiple Input Validation Vulnerabilities

The remote host is running Tutos, an open source team organization software package written in PHP. The remote version of this software is vulnerable to multiple input validation flaws that could allow an authenticated user to perform a cross-site scripting attack or a SQL injection against the...

TUTOS - 'file_overview.php?link_id' SQL Injection

source: https://www.securityfocus.com/bid/11221/info Tutos is reported prone to multiple remote input-validation vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and SQL-injection attacks. These...

TUTOS - file_overview.php?link_id SQL Injection

TUTOS - fileoverview.php?linkid SQL Injection source: https://www.securityfocus.com/bid/11221/info Tutos is reported prone to multiple remote input-validation vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-si...

TUTOS - app_new.php?t Cross-Site Scripting

TUTOS - appnew.php?t Cross-Site Scripting source: https://www.securityfocus.com/bid/11221/info Tutos is reported prone to multiple remote input-validation vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site...

TUTOS - 'app_new.php?t' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11221/info Tutos is reported prone to multiple remote input-validation vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and SQL-injection attacks. These...

[KSA-005] Multiple vulnerabilities in Tutos

================================================= Kereval Security Advisory KSA-005 Multiple vulnerabilities in Tutos ================================================= PROGRAM: Tutos HOMEPAGE: http://www.tutos.org VULNERABLE VERSIONS: 1.1.20031017 RISK: Medium/High IMPACT: Cross Site Scripting /...

Tutos 1.1.20031017 - 'note_overview.php?id' SQL Injection

source: https://www.securityfocus.com/bid/10129/info Multiple vulnerabilities have been identified in various modules of TUTOS. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, and possibly SQL injection...

Tutos 1.1.20031017 - note_overview.php?id SQL Injection

Tutos 1.1.20031017 - noteoverview.php?id SQL Injection source: https://www.securityfocus.com/bid/10129/info Multiple vulnerabilities have been identified in various modules of TUTOS. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site...

CVE-2003-0481

Multiple cross-site scripting XSS vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to fileselect.php...

CVE-2003-0482

TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using filenew.php, then directly accessing the uploaded code via a request to the repository containing the code...

CVE-2003-0481

CVE-2003-0481 concerns multiple XSS vulnerabilities in TUTOS 1.1, demonstrated via the msg parameter to file_select.php. The linked documents (NVD/Nessus/OpenVAS entries and multiple CVE aggregations) consistently show that remote attackers could inject arbitrary web scripts into affected pages, ...

CVE-2003-0482

CVE-2003-0482 affects TUTOS 1.1. An attacker can upload code via file_new.php and then access the uploaded code through the repository URL, enabling remote arbitrary code execution. The underlying issue is untrusted file upload/ improper access controls leading to code execution. Connected source...

CVE-2003-0482

TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using filenew.php, then directly accessing the uploaded code via a request to the repository containing the code...

CVE-2003-0481

Multiple cross-site scripting XSS vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to fileselect.php...

CVE-2003-0482: Undefined Security Weakness

TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using filenew.php, then directly accessing the uploaded code via a request to the repository containing the code...