EUVD-2006-1659

Malware in sbrugna...

EUVD-2006-1658

Malware in sbrugna...

[eVuln] N.T. Version 1.1.0 XSS and PHP Code Insertion Vulnerabilities

New eVuln Advisory: N.T. Version 1.1.0 XSS and PHP Code Insertion Vulnerabilities http://evuln.com/vulns/121/summary.html --------------------Summary---------------- eVuln ID: EV0121 CVE: CVE-2006-1657 CVE-2006-1658 Vendor: Chucky A. Ivey Software: N.T. Sowtware's Web Site: http://www.v-gfx.net/...

CVE-2006-1658

Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T. 1.1.0 allows remote administrators to insert arbitrary PHP code into the config file, which is included other N.T. scripts...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Chucky A. Ivey N.T. 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter, which is not filtered when the administrator views the "Login Log" page...

CVE-2006-1658

CVE-2006-1658 affects N.T. 1.1.0 (Chucky A. Ivey). The vulnerability is a Direct static code injection in ticker.db.php that allows remote administrators to insert arbitrary PHP code into the configuration file, which is then included by other N.T. scripts. This can enable code execution via the ...

CVE-2006-1657

CVE-2006-1657 affects NT (N.T.) 1.1.0 by Chucky A. Ivey. The vulnerability is a Cross-site Scripting (XSS) in the file index.php where the username parameter is not filtered when the administrator views the Login Log page. The issue enables remote attackers to inject arbitrary web script/HTML. Do...

CVE-2006-1658

Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T. 1.1.0 allows remote administrators to insert arbitrary PHP code into the config file, which is included other N.T. scripts...