EUVD-2005-4603

Malware in sbrugna...

EUVD-2005-4602

Malware in sbrugna...

EUVD-2004-2345

Malware in sbrugna...

INCOGEN Bugport 1.x Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16121/info Bugport is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

INCOGEN Bugport 1.x Index.PHP Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16123/info Bugport is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

CVE-2005-4607

CVE-2005-4607 describes a cross-site scripting (XSS) vulnerability in BugPort’s index.php for version 1.147 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the following parameters: ids[0], action, report_id, devWherePair[1][1], and binds[0]. The connecte...

CVE-2005-4608

CVE-2005-4608 : Affects BugPort 1.147 (index.php). The vulnerability is a SQL injection in the parameters (1) devWherePair[0], (2) orderBy, (3) where, allowing remote attackers to execute arbitrary SQL commands. Root cause: improper handling of input parameters leading to SQL injection. Impact: d...

CVE-2005-4609

index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive information such as full path and system configuration via an invalid action parameter...

CVE-2005-4609

The CVE describes a vulnerability in BugPort, affecting index.php in version 1.147 and earlier. The underlying issue is that an invalid action parameter allows remote attackers to disclose sensitive information, including full path and system configuration. The available records do not specify af...

CVE-2005-4607

Cross-site scripting XSS vulnerability in index.php in BugPort 1.147 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 ids0, 2 action, 3 reportid, 4 devWherePair11, and 5 binds0 parameters...

CVE-2005-4608

SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to execute arbitrary SQL commands via the 1 devWherePair0, 2 orderBy, and 3 where parameters...

INCOGEN Bugport 1.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16123/info Bugport is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in th...

INCOGEN Bugport 1.x - index.php Multiple Cross-Site Scripting Vulnerabilities

INCOGEN Bugport 1.x - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16123/info Bugport is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

INCOGEN Bugport 1.x - Multiple SQL Injections

source: https://www.securityfocus.com/bid/16121/info Bugport is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of t...

CVE-2005-4609

index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive information such as full path and system configuration via an invalid action parameter...

CVE-2005-4607

Cross-site scripting XSS vulnerability in index.php in BugPort 1.147 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 ids0, 2 action, 3 reportid, 4 devWherePair11, and 5 binds0 parameters...

CVE-2005-4608

SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to execute arbitrary SQL commands via the 1 devWherePair0, 2 orderBy, and 3 where parameters...

BugPort Multiple vuln.

BugPort Multiple vuln. r0t last vuln. report/advisory in 2005 year! Vuln. discovered by : r0t Date: 31 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/bugport-multiple-vuln.html vendor:www.incogen.com/index.php?type=General&param=bugport affected version:v1.147 and prior Product...

BugPort unspecified attachment handling flaw

This version of BugPort contains an unspecified attachment handling flaw. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2004-2353

BugPort before 1.099 stores its configuration file conf/config.conf under the web document root with a file extension that is not normally parsed by web servers, which allows remote attackers to obtain sensitive information...