10 matches found
EUVD-2006-2361
Malware in sbrugna...
EUVD-2006-2360
Malware in sbrugna...
Zabbix < 2.2.12 / 2.4.8 / 3.0.1 charts.php 'stime' Parameter Resource Consumption Remote DoS
According to its self-reported version number, the instance of Zabbix running on the remote host is affected by a denial of service vulnerability due to improper sanitization of user-supplied input to the 'stime' parameter in the 'charts.php' script. A remote attacker can exploit this issue to...
phpBB Chart Mod 1.1 charts.php id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly...
Unfixed XSS vulnerability at www.radioradio.us
Security researcher Milisx, has submitted on 05/10/2008 a cross-site-scripting XSS vulnerability affecting www.radioradio.us, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2008. It is currently...
CVE-2006-2359
Cross-site scripting XSS vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...
CVE-2006-2360
SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2360
SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2359
XSS vulnerability CVE-2006-2359 affects the phpBB Chart mod (charts.php) via the id parameter. The issue allows remote attackers to inject arbitrary script/HTML, with the note that it may stem from SQL injection. Base metrics indicate MEDIUM risk (CVSSv2: AV=N/AC=M/Au=N/C=N/I=P/A=N, base score 4....
phpBB "charts.php" XSS and SQL-Injection
// phpBB "charts.php" hack XSS and SQL-Injection // ----------------------------------------------------------------- Advisory by: LoK-Crew - Exploit: http://www.example.com/charts.php?action=vote&rate=1&id=XSS http://www.example.com/charts.php?action=vote&rate=1&id=SQL - Googledork:...