EUVD-2006-6004

Malware in sbrugna...

EUVD-2006-6005

Malware in sbrugna...

BestWebApp Dating Site login_form.asp msg Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21158/info BestWebApp Dating Site is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker...

bestwebapp-sql.txt

Aria-Security Team Persian Security Network http://Aria-Security.net ------------------------------- Shutouts: AurA, imm02tal Original Advisory and more info about this vulnerability: http://forum.aria-security.net/showthread.php?p=1442 Vendor: http://www.bestwebapp.com Google Search:...

[Aria-Security.Net] BestWebApp Dating System SQL Injection

Aria-Security Team Persian Security Network http://Aria-Security.net ------------------------------- Shutouts: AurA, imm02tal Original Advisory and more info about this vulnerability: http://forum.aria-security.net/showthread.php?p=1442 Vendor: http://www.bestwebapp.com Google Search:...

CVE-2006-6021

SQL injection vulnerability in the login component in BestWebApp Dating Site allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 passwd parameters...

CVE-2006-6021

CVE-2006-6021 describes a SQL injection in the login component of BestWebApp Dating Site, exploitable via the username and passwd parameters, allowing remote arbitrary SQL commands. The CVE entry indicates a network attack vector with no authentication, and partial impacts to confidentiality, int...

CVE-2006-6022

Cross-site scripting XSS vulnerability in loginform.asp in BestWebApp Dating Site allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2006-6021

SQL injection vulnerability in the login component in BestWebApp Dating Site allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 passwd parameters...

CVE-2006-6022

The CVE-2006-6022 entry documents a Cross-site Scripting (XSS) flaw in BestWebApp Dating Site, specifically in login_form.asp where an attacker can inject arbitrary script via the msg parameter. The vulnerability’s described impact is partial confidentiality/integrity/availability, with network a...

BestWebApp Dating Site Login Component - Multiple Field SQL Injections

BestWebApp Dating Site Login Component - Multiple Field SQL Injections source: https://www.securityfocus.com/bid/21158/info BestWebApp Dating Site is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently...

BestWebApp Dating Site - 'login_form.asp?msg' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21158/info BestWebApp Dating Site is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issues to stea...