EUVD-2015-4742

Malware in sbrugna...

EUVD-2015-4743

Malware in sbrugna...

AudioShare Code Injection Vulnerability

AudioShare is an audio file manager. AudioShare suffers from a code injection vulnerability that allows remote attackers to execute arbitrary PHP code by submitting a special 'config'basedir' ' parameter...

CVE-2015-4726

PHP remote file inclusion vulnerability in ajax/myajaxphp.php in AudioShare 2.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the config'basedir' parameter...

CVE-2015-4725

Cross-site scripting XSS vulnerability in forgot.php in AudioShare 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in forgot.php in AudioShare 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2015-4725

Cross-site scripting XSS vulnerability in forgot.php in AudioShare 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the email parameter...

CVE-2015-4726

AudioShare 2.0.2 is affected by a PHP remote file inclusion in ajax/myajaxphp.php that allows remote attackers to execute arbitrary PHP code via a URL supplied in the config['basedir'] parameter. Root cause appears to be improper handling of config['basedir'], enabling RFI. Severity from referenc...

CVE-2015-4725

AudioShare 2.0.2 is affected by a Cross-site Scripting (XSS) in forgot.php, exploitable via the email parameter. The vulnerability allows remote attackers to inject arbitrary script/HTML when user-provided data is rendered, enabling potential session hijacking or information disclosure as describ...

CVE-2015-4726

PHP remote file inclusion vulnerability in ajax/myajaxphp.php in AudioShare 2.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the config'basedir' parameter...