EUVD-2009-4853

Malware in sbrugna...

EUVD-2006-1563

Malware in sbrugna...

EUVD-2006-1564

Malware in sbrugna...

EUVD-2006-1562

Malware in sbrugna...

CVE-2009-4890

Multiple cross-site scripting XSS vulnerabilities in the login application in vBook 4.2.17 allow remote attackers to inject arbitrary web script or HTML via the 1 title and 2 message parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the login application in vBook 4.2.17 allow remote attackers to inject arbitrary web script or HTML via the 1 title and 2 message parameters...

CVE-2009-4890

CVE-2009-4890 describes multiple cross-site scripting (XSS) vulnerabilities in the login application of vBook 4.2.17, allowing remote attackers to inject arbitrary script/HTML via the 1) title and 2) message parameters. The affected product is the login component of vBook; the underlying cause is...

CVE-2009-4890

Multiple cross-site scripting XSS vulnerabilities in the login application in vBook 4.2.17 allow remote attackers to inject arbitrary web script or HTML via the 1 title and 2 message parameters...

CVE-2009-4890: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the login application in vBook 4.2.17 allow remote attackers to inject arbitrary web script or HTML via the 1 title and 2 message parameters...

DDIVRT-2009-21 vBook Login Application Cross-site Scripting Vulnerability

Title ----- DDIVRT-2009-21 vBook Login Application Cross-site Scripting Vulnerability Severity -------- Low Date Discovered --------------- January 19th, 2009 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: David Marshall and r@b13$ Vulnerability Description...

CVE-2006-1563

Direct static code injection vulnerability in config.php in vscripts aka Kuba Kunkiewicz VBook aka VBook 2.0 allows remote administrators to execute arbitrary PHP code into the config file, which is included other VBook scripts...

CVE-2006-1561

SQL injection vulnerability in index.php in vscripts aka Kuba Kunkiewicz VBook aka VBook 2.0 allows remote attackers to execute arbitrary SQL commands via the x parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in vscripts aka Kuba Kunkiewicz VBook aka VBook 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 autor, 2 www, 3 temat, and 4 tresc parameters...

Sql injection

SQL injection vulnerability in index.php in vscripts aka Kuba Kunkiewicz VBook aka VBook 2.0 allows remote attackers to execute arbitrary SQL commands via the x parameter...

CVE-2006-1563

Direct static code injection vulnerability in config.php in vscripts aka Kuba Kunkiewicz VBook aka VBook 2.0 allows remote administrators to execute arbitrary PHP code into the config file, which is included other VBook scripts...

CVE-2006-1561

SQL injection vulnerability in index.php in vscripts aka Kuba Kunkiewicz VBook aka VBook 2.0 allows remote attackers to execute arbitrary SQL commands via the x parameter...

CVE-2006-1561

The CVE-2006-1561 issue affects the [V]Book (aka VBook) 2.0 software (vscripts) and is caused by improper sanitization in index.php, where the x parameter is used unsafely in SQL queries. This allows remote attackers to execute arbitrary SQL commands. The connected sources consistently describe S...

CVE-2006-1562

The CVE-2006-1562 entry concerns vulnerable [V]Book (aka VScripts/VBook) version 2.0 by Kuba Kunkiewicz. Multiple cross-site scripting (XSS) vulnerabilities exist in index.php, exploitable via four parameters (autor, www, temat, tresc). The underlying issue is insufficient input sanitization, all...

CVE-2006-1563

Affected software/component: [V]Book (aka VBook) 2.0 by vscripts; vulnerable file: config.php. Root cause: Direct static code injection allows an attacker to insert arbitrary PHP code into config.php, which is subsequently included by other [V]Book scripts. Impact: Remote code execution leading t...

CVE-2006-1562

Multiple cross-site scripting XSS vulnerabilities in index.php in vscripts aka Kuba Kunkiewicz VBook aka VBook 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 autor, 2 www, 3 temat, and 4 tresc parameters...