EUVD-2006-3305

Malware in sbrugna...

CVE-2006-3307

Multiple SQL injection vulnerabilities in Project EROS bbsengine before bbsengine-20060429-1550-jam allow remote attackers to execute arbitrary SQL commands via 1 unspecified parameters in the php/comment.php and 2 the getpartialmatches method in php/aolbonics.php...

CVE-2006-3308

Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has unknown impact and remote attack vectors via img tags, possibly cross-site scripting XSS...

CVE-2006-3306

Cross-site scripting XSS vulnerability in the preparestring function in lib/common.php in Project EROS bbsengine before 20060501-0142-jam, and possibly earlier versions dating back to 2006-02-23, might allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2006-3306

CVE-2006-3306 affects Project EROS bbsengine (lib/common.php, preparestring) with an XSS flaw. The vulnerability is in the preparestring function and could allow remote attackers to inject arbitrary web script or HTML; affected versions include before 20060501-0142-jam and possibly earlier since ...

CVE-2006-3307

Multiple SQL injection vulnerabilities in Project EROS bbsengine before bbsengine-20060429-1550-jam allow remote attackers to execute arbitrary SQL commands via 1 unspecified parameters in the php/comment.php and 2 the getpartialmatches method in php/aolbonics.php...

CVE-2006-3308

CVE-2006-3308 affects the wpprop component of Project EROS bbsengine prior to 20060622-0315. The vulnerability’s impact is not clearly quantified in the provided documents, but remote attack vectors via [img] tags are noted with a possible cross-site scripting (XSS) effect. The NVD entry assigns ...

CVE-2006-3306

Cross-site scripting XSS vulnerability in the preparestring function in lib/common.php in Project EROS bbsengine before 20060501-0142-jam, and possibly earlier versions dating back to 2006-02-23, might allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2006-3308

Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has unknown impact and remote attack vectors via img tags, possibly cross-site scripting XSS...

CVE-2006-3307

Summary: CVE-2006-3307 describes multiple SQL injection vulnerabilities in Project EROS bbsengine (before bbsengine-20060429-1550-jam). Affected component: bbsengine, specifically (1) unspecified parameters in php/comment.php and (2) the getpartialmatches method in php/aolbonics.php. Root cause /...

[SA20760] Project EROS bbsengine Multiple Vulnerabilities

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...