avf.asso.fr XSS vulnerability

Vulnerable URL: http://avf.asso.fr/extensions/annuaire.php?search=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 843741 VIP website status:| No Check avf.asso.fr SSL connection:|...

PHPEasyData 1.5.4 - annuaire.php annuaire Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site scripting issues to...

PunBBAnnuaire <=0.4 Blind SQL Injection Vulnerability

No description provided by source. PunBBAnnuaire =0.4 Blind SQL Injection Vulnerability ======================================================== .:. Author : Metropolis .:. Home : http://xrayoptics.by.ru/ .:. Script : PunBBAnnuaire .:. Version : 0.4 .:. Download Script:...

CVE-2008-2994

Multiple cross-site scripting XSS vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the 1 annuaire parameter to a lastrecords.php and b annuaire.php and the 2 by and 3 catid parameters to annuaire.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the 1 annuaire parameter to a lastrecords.php and b annuaire.php and the 2 by and 3 catid parameters to annuaire.php...

PHPEasyData 1.5.4 - annuaire.php Multiple Cross-Site Scripting Vulnerabilities

PHPEasyData 1.5.4 - annuaire.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

Sql injection

SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-2113

PHPEasyData 1.5.4 is affected by a SQL injection in annuaire.php via the cat_id parameter, enabling remote attackers to execute arbitrary SQL commands. The CVSSv2 base score is 7.5 (HIGH) with network attack vector and no authentication, and impacts to confidentiality, integrity, and availability...