mysql-lite-administrator XSS vulnerabilities

Credits: hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-MYSQLLITEADMINISTRATOR0621.txt Vendor: ============================================= code.google.com/p/mysql-lite-administrator Product:...

CVE-2015-5064: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in MySql Lite Administrator mysql-lite-administrator beta-1 allow remote attackers to inject arbitrary web script or HTML via the tablename parameter to 1 tabella.php, 2 coloni.php, or 3 insert.php or 4 numrow parameter to coloni.php...

PT-2015-6762

Name of the Vulnerable Software and Affected Versions mysql-lite-administrator version beta-1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the table name parameter to API endpoints such as "tabella.php", "coloni.php", or...