CVE-2006-0535

Multiple cross-site scripting XSS vulnerabilities in Community Server allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: this candidate does not contain any actionable or distinguishing information. Perhaps it should not be included in CVE. NOTE: the...

CVE-2006-0535

Technical details for CVE-2006-0535 are not publicly available in the provided documents. No affected product/version or fix is specified here. Monitor for updates.

ashnews083.txt

Advisory 7 Title: AshWebStudio AshNews Multiple Vulnerabilities Author: 0ozeuso0 Contact: [email protected] Website: Security-mx.org Date: 01/02/2006 Risk: High Vendor Url: http://dev.ashwebstudio.com/?section=ashnews Affected Software: AshWebStudio AshNews Non Affected: We Are: olimpus klan...

CVE-2005-4384

CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid 1 fuseaction parameter to index.cfm and 2 documentid parameter to document/docWindow.cfm...

CVE-2005-4383

Cross-site scripting XSS vulnerability in index.cfm in CitySoft Community Enterprise 4.x allows remote attackers to inject arbitrary web script or HTML via the 1 presentationSite, 2 docPublishYear, 3 docDescription, 4 publishState, 5 docAuthor, 6 docTitle, 7 subTopic, 8 topic, 9 topicRadio, 10...

CVE-2005-4383

Cross-site scripting XSS vulnerability in index.cfm in CitySoft Community Enterprise 4.x allows remote attackers to inject arbitrary web script or HTML via the 1 presentationSite, 2 docPublishYear, 3 docDescription, 4 publishState, 5 docAuthor, 6 docTitle, 7 subTopic, 8 topic, 9 topicRadio, 10...

CVE-2005-4384

CVE-2005-4384 affects CitySoft Community Enterprise 4.x. The vulnerability enables remote attackers to disclose the server’s full path via invalid parameters: (1) fuseaction in index.cfm and (2) documentid in document/docWindow.cfm. The connected documents provide this concrete detail; no vendor/...

CVE-2005-4383

CVE-2005-4383 describes a cross-site scripting (XSS) vulnerability in CitySoft Community Enterprise 4.x, specifically in index.cfm. The vulnerability arises via multiple parameters (presentationSite, docPublishYear, docDescription, publishState, docAuthor, docTitle, subTopic, topic, topicRadio, t...

CVE-2005-4382

The CVE-2005-4382 entry describes an SQL injection vulnerability in CitySoft Community Enterprise 4.x. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying crafted values for (1) nodeID, (2) pageID, (3) ID, (4) parentid parameters to index.cfm and (5) documentF...

CVE-2005-4382

SQL injection vulnerability in CitySoft Community Enterprise 4.x allows remote attackers to execute arbitrary SQL commands via the 1 nodeID, 2 pageID, 3 ID, and 4 parentid parameter to index.cfm; and 5 documentFormatId parameter to document/docWindow.cfm...

CVE-2005-4384

CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid 1 fuseaction parameter to index.cfm and 2 documentid parameter to document/docWindow.cfm...

CVE-2005-4338

announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to gain administrator privileges by setting the context parameter to "admin"...

CVE-2005-4337

The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified userid parameter and a "/" in the encodedpw parameter...

CVE-2005-4341

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to list all available categories via a blank categoryid parameter to category.pl. NOTE: it is not clear whether this information is sensitive or not, so this...

Community Enterprise 4.x - Multiple Input Validation Vulnerabilities

Community Enterprise 4.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15963/info Community Enterprise is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

CVE-2005-4341

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to list all available categories via a blank categoryid parameter to category.pl. NOTE: it is not clear whether this information is sensitive or not, so this...

CVE-2005-4337

The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified userid parameter and a "/" in the encodedpw parameter...

CVE-2005-4341

Blackboard Learning and Community Portal System in Academic Suite before version 6 is affected by CVE-2005-4341. The issue arises in category.pl where a blank category_id parameter allows remote attackers to list all categories, constituting information disclosure (confidentiality impact: partial...

CVE-2005-4339

CVE-2005-4339 is an XSS vulnerability in Blackboard Learning and Community Portal System (Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6) where a attacker-supplied context parameter to announcement.pl is reflected in the page. The issue is caused by improper handling of user inpu...

CVE-2005-4338

announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to gain administrator privileges by setting the context parameter to "admin"...