35 matches found
EUVD-2006-6461
Malware in sbrugna...
EUVD-2006-6462
Malware in sbrugna...
EUVD-2006-6463
Malware in sbrugna...
AnnonceScriptHP 2.0 admin/admin_config/Aide.php email Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
AnnonceScriptHP 2.0 Templates/admin.dwt.php email Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
AnnonceScriptHP 2.0 erreurinscription.php email Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
AnnonceScriptHP 2.0 email.php id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
AnnonceScriptHP 2.0 membre.dwt.php email Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
AnnonceScriptHP 2.0 Templates/commun.dwt.php email Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
AnnonceScriptHP 2.0 voirannonce.php no Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
AnnonceScriptHP 2.0 admin/admin_membre/fiche_membre.php idmembre Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
CVE-2006-6479
Multiple cross-site scripting XSS vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the email parameter in 1 erreurinscription.php, 2 Templates/admin.dwt.php, 3 Templates/commun.dwt.php, 4 membre.dwt.php, and 5 admin/adminconfig/Aide.php...
CVE-2006-6478
Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a email.php, the 2 no parameter in b voirannonce.php, the 3 idmembre parameter in c admin/adminmembre/fichemembre.php, and the 4 idannonce parameter in ...
CVE-2006-6480
admin/adminmembre/fichemembre.php in AnnonceScriptHP 2.0 allows remote attackers to obtain sensitive information via the idmembre parameter, which discloses the passwords for arbitrary users...
CVE-2006-6479
CVE-2006-6479 documents multiple XSS flaws in AnnonceScriptHP 2.0, allowing remote attackers to inject arbitrary script or HTML via the email parameter. Affected files are: erreurinscription.php, Templates/admin.dwt.php, Templates/commun.dwt.php, membre.dwt.php, and admin/admin_config/Aide.php. T...
CVE-2006-6478
CVE-2006-6478 describes multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0. The affected components are (a) email.php (id parameter), (b) voirannonce.php (no parameter), (c) admin/admin_membre/fiche_membre.php (idmembre), and (d) admin/admin_annonce/okvalannonce.php and (e) admin/admin...
CVE-2006-6478
Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a email.php, the 2 no parameter in b voirannonce.php, the 3 idmembre parameter in c admin/adminmembre/fichemembre.php, and the 4 idannonce parameter in ...
CVE-2006-6480
CVE-2006-6480 affects AnnonceScriptHP 2.0. The vulnerability is in admin/admin_membre/fiche_membre.php, where the idmembre parameter allows remote attackers to obtain sensitive information, specifically passwords for arbitrary users. The provided sources confirm the affected component and the dat...
ashp20.txt
AnnonceScriptHP V2.0 -------------------- Vendor site: http://www.scripthp.com/ Product: AnnonceScriptHP V2.0 Vulnerability: XSS & SQL Injection Vulnerability Credits: MrKaLiMaN Reported to Vendor: 02/12/06 Public disclosure: 09/12/06 Description: ------------ Password disclosure all members:...
AnnonceScriptHP V2.0 Multiple Vulnerabilities
AnnonceScriptHP V2.0 -------------------- Vendor site: http://www.scripthp.com/ Product: AnnonceScriptHP V2.0 Vulnerability: XSS & SQL Injection Vulnerability Credits: MrKaLiMaN Reported to Vendor: 02/12/06 Public disclosure: 09/12/06 Description: ------------ Password disclosure all members:...