8 matches found
EUVD-2018-13116
Malware in sbrugna...
CVE-2018-20564: Improper Neutralization of Input During Web Page Generation
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/productcategory.php?rec=update has XSS via the catname parameter...
CVE-2018-20562: Improper Neutralization of Input During Web Page Generation
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/articlecategory.php?rec=update has XSS via the catname parameter...
CuteNews <= 1.4.1 (categories.mdu) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl cijfer-cnxpl - CuteNews =1.4.1 Remote Command Execution Copyright c 2005 cijfer [email protected] All rights reserved. 1. example cijfer@kalma:/research$ ./cijfer-cnxpl.pl -h www.xxxx.org -d /news [email protected] /$ id;uname -a uid=48apache...
CVE-2010-4904: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Aardvertiser comaardvertiser component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catname parameter in a view action to index.php. NOTE: some of these details are obtained from third party information...
CVE-2007-6633
Multiple cross-site scripting XSS vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to inject arbitrary web script or HTML via 1 the catname parameter to faq.php; and unspecified parameters to the 2 add categories, 3 edit categories, 4 delete categories, 5 add faq...
CVE-2006-4442: Undefined Security Weakness
Cross-site scripting XSS vulnerability in PHP iAddressBook before 0.95 allows remote attackers to inject arbitrary web script or HTML via the catname parameter, related to adding a category. categories field. NOTE: some details are obtained from third party information...
[SA21611] PHP iAddressBook "cat_name" Script Insertion Vulnerability
TITLE: PHP iAddressBook "catname" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA21611 VERIFY ADVISORY: http://secunia.com/advisories/21611/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHP iAddressbook 0.x http://secunia.com/product/11678/ DESCRIPTION:...