10 matches found
EUVD-2006-5442
Malware in sbrugna...
EUVD-2006-5431
Malware in sbrugna...
Casinosoft Casino Script 3.2 Config.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20646/info Casinosoft Casino Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
CVE-2006-5457
Multiple cross-site scripting XSS vulnerabilities in the registration form in Casinosoft Casino Script Masvet 3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 surname field...
CVE-2006-5446
SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script aka Masvet 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter...
CVE-2006-5446
SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script aka Masvet 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter...
CVE-2006-5457
Multiple cross-site scripting XSS vulnerabilities in the registration form in Casinosoft Casino Script Masvet 3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 surname field...
CVE-2006-5446
The CVE-2006-5446 entry applies to Casinosoft Casino Script (aka Masvet) 3.2, where a SQL injection vulnerability exists in lobby/config.php exploitable via the cfam parameter. The issue allows remote attackers to execute arbitrary SQL commands and is categorized with Media Trust considerations f...
CVE-2006-5457
Casinosoft Casino Script (Masvet) 3.2 contains multiple XSS vulnerabilities in its registration form, exploitable via the name or surname fields to inject arbitrary script/HTML. Remote exploitation is described; impact is limited to partial integrity and client-side exposure per the CVSS metrics ...
Casinosoft Casino Script 3.2 - 'config.php' SQL Injection
source: https://www.securityfocus.com/bid/20646/info Casinosoft Casino Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acces...