phpwebnews 0.1 bukutamu.php m_txt Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/23448/info The 'phpwebnews' package is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script co...

CVE-2008-6812

SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the det parameter...

CVE-2008-6812

The CVE-2008-6812 issue affects phpWebNews 0.2 MySQL Edition, specifically the bukutamu.php component, where the det parameter is vulnerable to SQL injection. This allows remote attackers to execute arbitrary SQL commands. The NVD data shows a high severity (CVSS v2 base score 7.5) with network a...

CVE-2008-6812: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the det parameter...

phpwebnews 'bukutamu.php' SQL注入漏洞

BUGTRAQ ID: 30080 CNCAN ID：CNCAN-2008070702 phpwebnews是一款基于PHP的WEB应用程序。 phpwebnews不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'bukutamu.php'脚本对用户提交给'det'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Surat kabar phpwebnews 0.2 Surat kabar phpwebnews 0.1 目前没有解决方案提供：...

CVE-2007-2300: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Endy Kristanto Surat kabar / News Management Online aka phpwebnews 0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the mtxt parameter to 1 iklan.php, 2 index.php, or 3 bukutamu.php...