CVE-2006-3155

Multiple cross-site scripting XSS vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 item parameter in a emailtofriend.pl or b violation.pl, 2 seller parameter in c vsoa.pl, 3 user parameter in d userask.pl or e leavefeed.pl...

CVE-2006-3154

SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3156

Cross-site scripting XSS vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the subid parameter...

CVE-2006-3153

Cross-site scripting XSS vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-3156

CVE-2006-3156 describes a cross-site scripting (XSS) vulnerability in the web application, specifically in the file index.cgi of Ultimate eShop 1.0 and earlier. The issue is exploitable via the subid parameter and allows remote attackers to inject arbitrary web script or HTML. The available metad...

CVE-2006-3155

This CVE (CVE-2006-3155) affects Ultimate Auction 1.0 and earlier. The vulnerability consists of multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via user-controlled input parameters in several scripts: (1) item parameter in emailtofrien...

CVE-2006-3154

SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3153

The CVE-2006-3153 issue is a cross-site scripting (XSS) vulnerability in index.pl of Ultimate Estate 1.0 and earlier. The vulnerability arises from the cat parameter, enabling remote attackers to inject arbitrary web script or HTML. Affected product: Ultimate Estate (version 1.0 and earlier). Roo...

CVE-2006-3153

Cross-site scripting XSS vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-3155

Multiple cross-site scripting XSS vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 item parameter in a emailtofriend.pl or b violation.pl, 2 seller parameter in c vsoa.pl, 3 user parameter in d userask.pl or e leavefeed.pl...

CVE-2006-3154

CVE-2006-3154 describes an SQL injection in index.pl of Ultimate Estate 1.0 and earlier, exploitable via the id parameter. The vulnerability allows remote attackers to potentially execute arbitrary SQL commands, with a CVSS v2 base score of 7.5 (HIGH) and network/low complexity exposure with no a...

Ultimate PHP Board <= 1.96 GOLD Multiple Vulnerabilities Exploit

No description provided by source. ?php / Advisory: http://www.kliconsulting.com/users/mbrooks/UPBadvisory.rtf Vendors site: http://forum.myupb.com/ Download: http://fileserv.myupb.com/download.php?url=upb196GOLD.zip http://prdownloads.sourceforge.net/textmb/upb1.8.2.zip?download Download Mirror:...

Ultimate PHP Board multiple XSS vulnerabilities

The remote version of Ultimate PHP Board UPB is affected by several cross-site scripting vulnerabilities. This issue is due to a failure of the application to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attackers to inject arbitrary web script or HTML via the 1 ortak or 2 kat parameter...

CyberShop Ultimate E-Commerce - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16473/info CyberShop Ultimate E-commerce is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issue to have arbitrary scrip...

ua367XSS.txt

Hello! I've found a XSS in Ultimate Auction alert"XSS" http://www.ultimate-auction.de/cgi-local/auktion/itemlist.pl?category=alert"XSS" The bug has the BID 16239...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary web script or HTML via the 1 item parameter in item.pl and 2 category parameter in itemlist.pl, which reflects the XSS in an error message. NOTE: the affected version might be wro...

CVE-2006-0217

Multiple cross-site scripting XSS vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary web script or HTML via the 1 item parameter in item.pl and 2 category parameter in itemlist.pl, which reflects the XSS in an error message. NOTE: the affected version might be wro...

CVE-2006-0217

Affected software: Ultimate Auction. Vulnerability: multiple cross-site scripting (XSS) flaws allowing remote injection via item.pl (item parameter) and itemlist.pl (category parameter) with the XSS reflected in an error message. Affected version note mentions 3.6.1 as of 20060116; the entry itse...

Ultimate Auction 3.67 - ItemList.pl Cross-Site Scripting

Ultimate Auction 3.67 - ItemList.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/16254/info Ultimate Auction is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage thi...