EUVD-2006-4312

Malware in sbrugna...

EUVD-2006-4311

Malware in sbrugna...

EV0135.txt

New eVuln Advisory: indexcity SQL Injection and XSS Vulnerabilities http://evuln.com/vulns/135/summary.html --------------------Summary---------------- eVuln ID: EV0135 CVE: CVE-2006-4323 CVE-2006-4324 Vendor: CityForFree Vendor's Web Site: http://www.cityforfree.com/ Software: indexcity Sowtware...

[eVuln] indexcity SQL Injection and XSS Vulnerabilities

New eVuln Advisory: indexcity SQL Injection and XSS Vulnerabilities http://evuln.com/vulns/135/summary.html --------------------Summary---------------- eVuln ID: EV0135 CVE: CVE-2006-4323 CVE-2006-4324 Vendor: CityForFree Vendor's Web Site: http://www.cityforfree.com/ Software: indexcity Sowtware...

CVE-2006-4323

SQL injection vulnerability in list.php in CityForFree indexcity 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cateid parameter...

CVE-2006-4324

Cross-site scripting XSS vulnerability in addurl2.php in CityForFree indexcity 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2006-4323

SQL injection vulnerability in list.php in CityForFree indexcity 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cateid parameter...

CVE-2006-4323

CVE-2006-4323 involves an SQL injection in CityForFree’s indexcity 1.0 product, specifically the vulnerable script is list.php. The underlying issue occurs when magic_quotes_gpc is disabled, allowing an attacker to inject arbitrary SQL through the cate_id parameter. Connected documents corroborat...

CVE-2006-4324

Cross-site scripting XSS vulnerability in addurl2.php in CityForFree indexcity 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2006-4324

CityForFree indexcity 1.0 has an XSS vulnerability in add_url2.php exploitable via the url parameter. The underlying issue is insufficient input sanitization, allowing remote attackers to inject arbitrary web script or HTML. Affected software/version: indexcity 1.0 (add_url2.php). Impact: client-...

CVE-2006-4324: Undefined Security Weakness

Cross-site scripting XSS vulnerability in addurl2.php in CityForFree indexcity 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2006-4323: Undefined Security Weakness

SQL injection vulnerability in list.php in CityForFree indexcity 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cateid parameter...