EUVD-2008-6298

Malware in sbrugna...

EUVD-2008-6281

Malware in sbrugna...

EUVD-2008-7140

Malware in sbrugna...

EUVD-2008-6660

Malware in sbrugna...

butterfly organizer 2.0.0 (sql/xss) Multiple Vulnerabilities

No description provided by source. ====================================================================== Butterfly Organizer 2.0.0 SQL/XSS Multiple Remote Vulnerabilities ====================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

CVE-2008-7181

Butterfly Organizer 2.0.0 allows remote attackers to 1 delete arbitrary categories via a modified tablehere parameter to category-delete.php with the isjsconfirmed parameter set to 1, or 2 delete arbitrary accounts via the mytable parameter to delete.php...

Code injection

Butterfly Organizer 2.0.0 allows remote attackers to 1 delete arbitrary categories via a modified tablehere parameter to category-delete.php with the isjsconfirmed parameter set to 1, or 2 delete arbitrary accounts via the mytable parameter to delete.php...

CVE-2008-7181

CVE-2008-7181 affects Butterfly Organizer 2.0.0. The vulnerability lets remote attackers delete data by manipulating parameters: (1) tablehere with is_js_confirmed=1 to category-delete.php, and (2) mytable to delete.php, enabling arbitrary category/account deletion. The connected documents confir...

CVE-2008-7181

Butterfly Organizer 2.0.0 allows remote attackers to 1 delete arbitrary categories via a modified tablehere parameter to category-delete.php with the isjsconfirmed parameter set to 1, or 2 delete arbitrary accounts via the mytable parameter to delete.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 mytable parameter to view.php, 2 mytable parameter to viewdb2.php, 3 tablehere parameter to category-rename.php, and 4 letter parameter to...

CVE-2008-6700

Multiple cross-site scripting XSS vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 mytable parameter to view.php, 2 mytable parameter to viewdb2.php, 3 tablehere parameter to category-rename.php, and 4 letter parameter to...

CVE-2008-6700

CVE-2008-6700 describes multiple cross-site scripting (XSS) vulnerabilities in Butterfly Organizer 2.0.0. The flaws allow remote attackers to inject arbitrary web script or HTML via specific parameters: (1) mytable to view.php, (2) mytable to viewdb2.php, (3) tablehere to category-rename.php, and...

CVE-2008-6700

Multiple cross-site scripting XSS vulnerabilities in Butterfly Organizer 2.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 mytable parameter to view.php, 2 mytable parameter to viewdb2.php, 3 tablehere parameter to category-rename.php, and 4 letter parameter to...

Butterfly Organizer Multiple SQL Injection and Cross-Site Scripting Vulnerabilities

Butterfly Organizer is prone to multiple cross-site scripting and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application...

Sql injection

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE: the id vector is covered by another CVE name...

Sql injection

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6328

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6311

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE: the id vector is covered by another CVE name...

CVE-2008-6311

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE: the id vector is covered by another CVE name...

CVE-2008-6311

The vulnerability CVE-2008-6311 affects Butterfly Organizer 2.0.1 via the view.php file, where the mytable parameter is vulnerable to SQL injection. This allows remote attackers to execute arbitrary SQL commands, with the impact described as enabling database operations beyond intended access. Th...