Cross site scripting

Cross-site scripting XSS vulnerability in info.php in Bandwebsite aka Bandsite portal system 1.5 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2008-5337

CVE-2008-5337 is a SQL injection in Bandwebsite (Bandsite portal system) 1.5, via lyrics.php id parameter. The vulnerability arises from improper handling of the id input, allowing remote execution of arbitrary SQL commands. Impact is described as partial confidentiality/integrity/availability wi...

CVE-2008-5338

Cross-site scripting XSS vulnerability in info.php in Bandwebsite aka Bandsite portal system 1.5 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2008-5338

CVE-2008-5338 is an XSS vulnerability in Bandwebsite (Bandsite portal system) 1.5, exploitable via info.php by passing a crafted section parameter to inject arbitrary script/HTML. The affected component is info.php; root cause is reflected XSS in the section parameter. Reported impact per sources...

CVE-2006-6722

CVE-2006-6722 affects Bandwebsite (Bandsite portal system) 1.5. Remote attackers can create administrative accounts by issuing a direct request to admin.php with the Login parameter set to 1. This is a network‑level issue with low attack complexity and no authentication required, allowing partial...

Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit

Exploit for unknown platform in category web applications =================================================== Bandwebsite Name: Pass: 0day.today 2018-03-28...

Bandwebsite 1.5 - LOGIN Remote Add Admin

Bandwebsite 1.5 - LOGIN Remote Add Admin Name: Pass: milw0rm.com 2006-12-16...

Bandsite portal system Admin Added Access

!-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting, audio sections, guestbook, tour...

Bandwebsite 1.5 - 'LOGIN' Remote Add Admin

Name: Pass: milw0rm.com 2006-12-16...

bandwebsite.txt

Informations : °°°°°°°°°°°°°° - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : Jelle de Vos - Tested version :1.5 - Problem : vulnerability in Bandsite Allows Gaining Admin Access. Product Description : °°°°°°°°°°°°°°°°°°°°° Bandsite is an...