EUVD-2006-1400

Malware in sbrugna...

EUVD-2006-1399

Malware in sbrugna...

[SA19439] Cholod Mysql based message board Script Insertion and SQL Injection

TITLE: Cholod Mysql based message board Script Insertion and SQL Injection SECUNIA ADVISORY ID: SA19439 VERIFY ADVISORY: http://secunia.com/advisories/19439/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Cholod Mysql based message...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cholod MySQL Based Message Board allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1395

SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from...

Sql injection

SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-1395

SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-1396

Multiple cross-site scripting XSS vulnerabilities in Cholod MySQL Based Message Board allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1396

Technical details (affected product/component/version/root cause/exploit information) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2006-1395

The CVE-2006-1395 entry concerns a SQL injection vulnerability in mb.cgi of the Cholod MySQL Based Message Board. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action (possibly via the username parameter), with CVSS considerations ind...