EUVD-2009-4901

Malware in sbrugna...

EUVD-2009-4907

Malware in sbrugna...

EUVD-2009-4905

Malware in sbrugna...

Ad Rotator AdPeeps 8.6.9 Persistent XSS Vulnerability

Exploit for php platform in category web applications Advisory: Ad Rotator AdPeeps 8.6.9 Persistent XSS Vulnerability Version:8.6.9 Vendor URL: http://adpeeps.com/ Demo Link:http://demo.adpeeps.com/ Author: Viknesvaran Sittaramane Category: Webapp Twiiter: https://twitter.com/csvsn...

AdPeeps 'index.php' Multiple Vulnerabilities.

AdPeeps is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4939

Multiple cross-site scripting XSS vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the 1 uid parameter, 2 uid parameter in a loginlookup action, 3 uid parameter in an adminlogin action, 4 campaignid parameter in a createcampaign actio...

CVE-2009-4945

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

CVE-2009-4939

AdPeeps 8.5d1 is affected by multiple cross-site scripting (XSS) vulnerabilities in index.php. The issues allow remote attackers to inject arbitrary web script or HTML via a large set of parameters (e.g., uid, campaignid, type, period, accname, loginpass, e9, from, message, idno, plus several for...

CVE-2009-4943

CVE-2009-4943 affects AdPeeps 8.5d1, where index.php exposes sensitive information: (1) view_adrates with an invalid uid leaks the installation path via an error message, and (2) adminlogin with a crafted uid reveals the version. Documents show CVSS2 base 5.0 (medium) and reference multiple advis...

CVE-2009-4945

CVE-2009-4945 affects AdPeeps 8.5d1, where a default admin password enables remote access via index.php. The vulnerability has CVSSv2 base score 7.5 (NETWORK vector, low attack complexity, no authentication). Impact described as partial confidentiality, integrity, and availability. Documents conf...

CVE-2009-4943

index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via 1 a viewadrates action with an invalid uid parameter, which reveals the installation path in an error message; or 2 an adminlogin action with a crafted uid parameter, which reveals the version number...

CVE-2009-4945

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

CVE-2009-4939

Multiple cross-site scripting XSS vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the 1 uid parameter, 2 uid parameter in a loginlookup action, 3 uid parameter in an adminlogin action, 4 campaignid parameter in a createcampaign actio...

CVE-2009-4943

index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via 1 a viewadrates action with an invalid uid parameter, which reveals the installation path in an error message; or 2 an adminlogin action with a crafted uid parameter, which reveals the version number...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the 1 uid parameter, 2 uid parameter in a loginlookup action, 3 uid parameter in an adminlogin action, 4 campaignid parameter in a createcampaign actio...

Default credentials

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

CVE-2009-4945: Undefined Security Weakness

AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via requests to index.php...

CVE-2009-4943: Exposure of Sensitive Information to an Unauthorized Actor

index.php in AdPeeps 8.5d1 allows remote attackers to obtain sensitive information via 1 a viewadrates action with an invalid uid parameter, which reveals the installation path in an error message; or 2 an adminlogin action with a crafted uid parameter, which reveals the version number...

CVE-2009-4939: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the 1 uid parameter, 2 uid parameter in a loginlookup action, 3 uid parameter in an adminlogin action, 4 campaignid parameter in a createcampaign actio...

[InterN0T] AdPeeps 8.5d1 - XSS and HTML Injection Vulnerabilities

AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads, rich-media/flash ads and text ads on your website. Built using PHP/MYSQL, Ad...