EUVD-2010-1395

Malware in sbrugna...

EUVD-2010-1393

Malware in sbrugna...

EUVD-2010-1394

Malware in sbrugna...

CVE-2010-1367

Multiple cross-site scripting XSS vulnerabilities in admin/adminlogin.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the 1 adminname and 2 adminpassword parameters. NOTE: the provenance of this information is unknown; the details...

Uiga Fan Club <= 1.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source...

Uiga Fan Club SQL Injection Vulnerability

No description provided by source. Exploit Title: Uiga Fan Club SQL Injection Vulnerability Date: 22/03/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net/products/ufc.html Software Link: http://www.scriptdevelopers.net/download/uigafanclub.zip Version: N/A Tested on: Win Wamp CVE : N...

CVE-2012-4055

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter...

Sql injection

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2012-4055

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2012-4055

CVE-2012-4055 is a SQL injection vulnerability in index2.php of Uiga Fan Club, allowing remote attackers to execute arbitrary SQL via the p parameter. The issue is caused by improper input handling in that script, enabling potentially unauthorized data access or modification. The connected CIRCL ...

Sql injection

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...

Sql injection

Multiple SQL injection vulnerabilities in admin/adminlogin.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpassword parameters...

CVE-2010-1365

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/adminlogin.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the 1 adminname and 2 adminpassword parameters. NOTE: the provenance of this information is unknown; the details...

CVE-2010-1367

Multiple cross-site scripting XSS vulnerabilities in admin/adminlogin.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the 1 adminname and 2 adminpassword parameters. NOTE: the provenance of this information is unknown; the details...

CVE-2010-1366

Multiple SQL injection vulnerabilities in admin/adminlogin.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpassword parameters...

CVE-2010-1367

CVE-2010-1367 describes multiple cross-site scripting (XSS) vulnerabilities in the admin/admin_login.php component of Uiga Fan Club, allowing remote attackers to inject arbitrary web script or HTML via the admin_name or admin_password parameters. The issue affects the login handling logic, enabli...

CVE-2010-1366

CVE-2010-1366 describes multiple SQL injection vulnerabilities in the admin_login.php of Uiga Fan Club 1.0 and earlier. The issue allows remote attackers to execute arbitrary SQL commands through the (1) admin_name and (2) admin_password parameters, with the affected component being the login han...

CVE-2010-1365

Affected software: Uiga Fan Club (index.php). Vulnerability: SQL injection in the photos action, exploited via the id parameter of index.php. Root cause/impact: Improper handling of the id parameter enables arbitrary SQL commands (partial confidentiality/integrity/availability impact per CVSS). C...

CVE-2010-1365

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...