14 matches found
EUVD-2006-2361
Malware in sbrugna...
EUVD-2006-2360
Malware in sbrugna...
Zabbix < 2.2.12 / 2.4.8 / 3.0.1 charts.php 'stime' Parameter Resource Consumption Remote DoS
According to its self-reported version number, the instance of Zabbix running on the remote host is affected by a denial of service vulnerability due to improper sanitization of user-supplied input to the 'stime' parameter in the 'charts.php' script. A remote attacker can exploit this issue to...
phpBB Chart Mod 1.1 charts.php id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly...
PT-2010-1931
Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions 11.x through 11 RU6 MP1 Description The issue allows remote attackers to bypass intended restrictions on report generation, overwrite arbitrary PHP scripts, and execute arbitrary code via a crafted request...
CVE-2009-2109: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in FretsWeb 1.2 allow remote attackers to read arbitrary files via directory traversal sequences in the 1 language parameter to charts.php and the 2 fretsweblanguage cookie parameter to unspecified vectors, possibly related to admin/common.php...
Unfixed XSS vulnerability at www.radioradio.us
Security researcher Milisx, has submitted on 05/10/2008 a cross-site-scripting XSS vulnerability affecting www.radioradio.us, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2008. It is currently...
CVE-2006-2359
Cross-site scripting XSS vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...
CVE-2006-2360
SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2359
XSS vulnerability CVE-2006-2359 affects the phpBB Chart mod (charts.php) via the id parameter. The issue allows remote attackers to inject arbitrary script/HTML, with the note that it may stem from SQL injection. Base metrics indicate MEDIUM risk (CVSSv2: AV=N/AC=M/Au=N/C=N/I=P/A=N, base score 4....
CVE-2006-2360
SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2360: Undefined Security Weakness
SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2359: Undefined Security Weakness
Cross-site scripting XSS vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...
phpBB "charts.php" XSS and SQL-Injection
// phpBB "charts.php" hack XSS and SQL-Injection // ----------------------------------------------------------------- Advisory by: LoK-Crew - Exploit: http://www.example.com/charts.php?action=vote&rate=1&id=XSS http://www.example.com/charts.php?action=vote&rate=1&id=SQL - Googledork:...