EUVD-2006-6671

Malware in sbrugna...

EUVD-2006-6670

Malware in sbrugna...

CVE-2006-6687

Cross-site scripting XSS vulnerability in Web Automated Perl Portal WebAPP 0.9.9.4, and 0.9.9.3.4 Network Edition NE aka WebAPP.NET, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtaine...

CVE-2007-1489: Cross-Site Request Forgery (CSRF)

Unspecified vulnerability in web-app.org Web Automated Perl Portal WebAPP 0.9.9.4 to 0.9.9.6 allows remote attackers to obtain admin access by modifying cookies and performing "certain consecutive actions," possibly due to a cross-site request forgery CSRF vulnerability...

CVE-2006-6687

CVE-2006-6687 describes a cross-site scripting (XSS) vulnerability in Web Automated Perl Portal (WebAPP) versions 0.9.9.4 and 0.9.9.3.4 Network Edition (WebAPP.NET). The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry notes a net...

CVE-2006-6687

Cross-site scripting XSS vulnerability in Web Automated Perl Portal WebAPP 0.9.9.4, and 0.9.9.3.4 Network Edition NE aka WebAPP.NET, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtaine...

CVE-2006-6687: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Web Automated Perl Portal WebAPP 0.9.9.4, and 0.9.9.3.4 Network Edition NE aka WebAPP.NET, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtaine...

CVE-2006-6688: Undefined Security Weakness

Web Automated Perl Portal WebAPP 0.9.9.4, and 0.9.9.3.4 Network Edition NE aka WebAPP.NET allows remote attackers to bypass filtering mechanisms via unknown vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

creLoaded 6.15 - 'HTMLAREA' Automated Perl

!/usr/bin/perl creLoaded Rather simple exploit, but still an exploit nonetheless. Attempts to upload php script and utilise that to execute commands, and show off a fake shell. Can specify: User-defined PHP script or one provided in this script suits most occasions Additional variables to pass to...