CVE-2006-1811

Multiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 forumid, or 3 threadid parameter to index.php; the 4 ICQ, 5 AIM, 6 MSN, 7 Google Talk, 8 Website Name, 9 Website Address, 10 Email Address, 11 Location, 12 Signatur...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the 1 ICQ, 2 AIM, 3 MSN, 4 Google Talk, 5 Website Name, 6 Website Address, 7 Email Address, 8 Location, 9 Signature, and 10 Sub-Titles fields in the user profil...

CVE-2006-1811

Multiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 forumid, or 3 threadid parameter to index.php; the 4 ICQ, 5 AIM, 6 MSN, 7 Google Talk, 8 Website Name, 9 Website Address, 10 Email Address, 11 Location, 12 Signatur...

[Full-disclosure] ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflow

ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflow http://www.zerodayinitiative.com/advisories/ZDI-06-008.html April 13, 2006 -- CVE ID: CVE-2006-0092 -- Affected Vendor: Novell -- Affected Products: Novell GroupWise Messenger 2 -- TippingPointTM IPS Customer Protection:...

VulnCheck KEV: CVE-2006-1359

Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer...

CVE-2006-1536

Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the 1 motclef and 2 nbrlineview parameters in a carnet.php, and the 3 idcontact parameter in b contactview.php...

CVE-2006-1399

Cross-site scripting XSS vulnerability in searchresult.php in Meeting Reserve 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1399

CVE-2006-1399 describes a cross-site scripting (XSS) vulnerability in the searchresult.php component of Meeting Reserve 1.0 beta. The issue arises when processing the search_term parameter, allowing remote attackers to inject arbitrary web script or HTML. The available documents identify the affe...

Plogger <= Beta 2.1 Administrative Credentials Disclosure Exploit

Exploit for unknown platform in category web applications ================================================================= Plogger works with magicquotesgpc = Off\r\n\r\n"; echo "dork: intext:"Powered by Plogger!" -plogger.org\r\n\r\n"; if $argc3 echo "Usage: php ".$argv0." host path...

Plogger Beta 2.1 - Administrative Credentials Disclosure

Plogger Beta 2.1 - Administrative Credentials Disclosure !/usr/bin/php -q -d shortopentag=on works with magicquotesgpc = Off\r\n\r\n"; echo "dork: intext:"Powered by Plogger!" -plogger.org\r\n\r\n"; if $argc3 echo "Usage: php ".$argv0." host path OPTIONS\r\n"; echo "host: target server...

Web Host Automation Ltd. Helm 3.2.10 Beta - domains.asp?txtDomainName Cross-Site Scripting

Web Host Automation Ltd. Helm 3.2.10 Beta - domains.asp?txtDomainName Cross-Site Scripting source: https://www.securityfocus.com/bid/17263/info Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

Web Host Automation Ltd. Helm 3.2.10 Beta - 'domains.asp?txtDomainName' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17263/info Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

Web Host Automation Ltd. Helm 3.2.10 Beta - default.asp Multiple Cross-Site Scripting Vulnerabilities

Web Host Automation Ltd. Helm 3.2.10 Beta - default.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17263/info Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Web Host Automation Ltd. Helm 3.2.10 Beta - 'default.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17263/info Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

CVE-2006-1360

Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 type, or 3 show parameter to a index.php; or the 4 message1 or 5 message parameter to b cart.php...

CVE-2006-1349

CVE-2006-1349 describes multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2. An affected component is the Musicbox web interface (index.php and cart.php) where user-supplied input in parameters (1) id, (2) type, (3) show, and (4) message1 can be injected as script/HTML. The...

CVE-2006-1106

The CVE-2006-1106 issue concerns a Cross-site Scripting (XSS) vulnerability in Pixelpost versions 1.5 beta 1 and earlier. The vulnerability arises in the commenting path, where input fields (message, name, url, email) can be manipulated to inject arbitrary web script/HTML due to insufficient inpu...

MyBloggie: Multiple XSS Vulnerabilities

=========================================================== MyBloggie: Multiple XSS Vulnerabilities =========================================================== Technical University of Vienna Security Advisory TUVSA-0603-002, March 9, 2006 ==========================================================...

Updated Noah Classifieds Component for Joomla!/Mambo

Updated Noah Classifieds Component for Joomla!/Mambo fixes vulnerabilities Problem: Several vulnerabilities were recently discovered in Noah Classifieds 1.3 which also affect the Joomla!/Mambo component. Details on the vulnerabilities are available at http://www.kapda.ir/advisory-268.html The...

CVE-2006-0693

CALimba (Roberto Butti) 0.99.2 beta and earlier has SQL injection in rb_auth.php. The login and password parameters are not sanitized before being used in a SQL query, enabling remote attackers to bypass authentication and execute arbitrary SQL commands. Root cause: unsanitized user inputs in the...