EUVD-2005-1977

Malware in sbrugna...

EUVD-2006-4589

Malware in sbrugna...

Annuaire 1Two 1.0/1.1 Index.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13961/info Annuaire 1Two is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

CVE-2006-4601

SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4601

CVE-2006-4601 describes a SQL injection vulnerability in the PHP script index.php of the product Annuaire 1Two 2.2 . The flaw allows remote attackers to execute arbitrary SQL commands by supplying a malicious value for the parameter id . The NVD entry assigns a base score of 7.5 ( HIGH ) with net...

CVE-2006-4601: Undefined Security Weakness

SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4601

SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Annuaire 1Two 2.2 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================== Annuaire 1Two 2.2 Remote SQL Injection Exploit ============================================== !/usr/bin/perl Affected.scr..: Annuaire 1Two 2.2 Poc.ID........: 09060902.txt Type..........: SQL...

Annuaire 1Two 2.2 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Affected.scr..: Annuaire 1Two 2.2 Poc.ID........: 09060902.txt Type..........: SQL Injection without quote Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: http://www.1two.org/ Poc.link......: acid-root.new.fr/poc/09060902.txt...

CVE-2005-1975

Multiple cross-site scripting XSS vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the id parameter to index.php, or the 2 siteid, 3 nom, 4 email, or 5 commentaire parameters in commentaires.php...

CVE-2005-1975

The CVE-2005-1975 entry concerns multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier. The affected components are the index.php script (id parameter) and commentaires.php (site_id, nom, email, commentaire parameters). Exploitation would allow remote attackers to i...

CVE-2005-1975

Multiple cross-site scripting XSS vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the id parameter to index.php, or the 2 siteid, 3 nom, 4 email, or 5 commentaire parameters in commentaires.php...

CVE-2005-1975: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the id parameter to index.php, or the 2 siteid, 3 nom, 4 email, or 5 commentaire parameters in commentaires.php...

Annuaire 1Two 1.0/1.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13961/info Annuaire 1Two is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browse...