EUVD-2010-4880

Malware in sbrugna...

EUVD-2010-4877

Malware in sbrugna...

ColdGen ColdUserGroup Cross-Site Scripting and SQL Injection Vulnerabilities

ColdGen ColdUserGroup is prone to cross site scripting and SQL injection vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-4913

Cross-site scripting XSS vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4916

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the 1 ArticleID or 2 LibraryID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4913

Cross-site scripting XSS vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4916

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the 1 ArticleID or 2 LibraryID parameter...

CVE-2010-4913: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4916: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the 1 ArticleID or 2 LibraryID parameter...

PT-2011-1848

Name of the Vulnerable Software and Affected Versions ColdGen ColdUserGroup version 1.06 Description A cross-site scripting XSS issue exists in the search feature, allowing remote attackers to inject arbitrary web script or HTML via the Keywords parameter. Recommendations For ColdGen ColdUserGrou...

PT-2011-1851

Name of the Vulnerable Software and Affected Versions ColdGen ColdUserGroup version 1.06 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ArticleID or LibraryID parameter in the "index.cfm" file. Recommendations For ColdGen ColdUserGroup...