26 matches found
EUVD-2009-4663
Malware in sbrugna...
EUVD-2007-3526
Malware in sbrugna...
CVE-2018-5689
Cross-site scripting XSS vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email...
CVE-2018-5689
Cross-site scripting XSS vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email...
CVE-2018-5689
Cross-site scripting XSS vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email...
CVE-2018-5689: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/auth.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the malicious user's email...
CVE-2012-1039
Multiple cross-site scripting XSS vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 logindata parameter to admin/auth.php; 2 nb parameter to admin/blogs.php; 3 type, 4 sortby, 5 order, or 6 status parameters to admin/comments.php; or ...
CVE-2012-1039: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 logindata parameter to admin/auth.php; 2 nb parameter to admin/blogs.php; 3 type, 4 sortby, 5 order, or 6 status parameters to admin/comments.php; or ...
PT-2012-3036
Name of the Vulnerable Software and Affected Versions Dotclear versions prior to 2.4.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters, including the login data parameter to "admin/auth.php", the nb parameter to...
CVE-2009-4699
Multiple cross-site scripting XSS vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin/auth.php and 2 fileuploader.php...
CVE-2009-4699: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in SkaDate Dating allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin/auth.php and 2 fileuploader.php...
CVE-2008-5880
CVE-2008-5880 affects Gobbl CMS 1.0. The issue is an authentication bypass in admin/auth.php, where setting the auth cookie to "ok" grants administrative access. This is a cookie‑level bypass that can let remote attackers obtain admin privileges without valid credentials. The provided documents i...
CVE-2008-5880: Improper Authentication
admin/auth.php in Gobbl CMS 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to "ok"...
Gobbl CMS 1.0 Insecure Cookie Handling
--------------------------- Gobbl Cms 1.0 I.Cookie Hand. --------------------------- Autore: x0r Evolution Team Email: [email protected] Demo Site:http://www.gobbl.net/ --------------------------- Bug In: \admin\auth.php ? include '../config.php'; $user = $POST'user'; $pass = $POST'pass'; if...
Gobbl CMS 1.0 Insecure Cookie Handling Vulnerability
No description provided by source. --------------------------- Gobbl Cms 1.0 I.Cookie Hand. --------------------------- Autore: x0r Evolution Team Email: [email protected] Demo Site:http://www.gobbl.net/ --------------------------- Bug In: \admin\auth.php ? include '../config.php'; $user =...
Gobbl CMS 1.0 - Insecure Cookie Handling
Gobbl CMS 1.0 - Insecure Cookie Handling --------------------------- Gobbl Cms 1.0 I.Cookie Hand. --------------------------- Autore: x0r Evolution Team Email: [email protected] Demo Site:http://www.gobbl.net/ --------------------------- Bug In: \admin\auth.php ? include '../config.php'; $user...
Gobbl CMS 1.0 - Insecure Cookie Handling
--------------------------- Gobbl Cms 1.0 I.Cookie Hand. --------------------------- Autore: x0r Evolution Team Email: [email protected] Demo Site:http://www.gobbl.net/ --------------------------- Bug In: \admin\auth.php ? include '../config.php'; $user = $POST'user'; $pass = $POST'pass'; if...
CVE-2008-4162
Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the gsiteurl parameter...
CVE-2008-4162: Improper Link Resolution Before File Access
Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the gsiteurl parameter...
