8 matches found
EUVD-2004-2059
Malware in sbrugna...
WordPress Bookings Plugin <= 1.8.2 - XSS
This plugin is prone to controlpanel.php error parameter cross site scripting vulnerability. Solution Update plugin...
Bookings <= 1.8.2 - controlpanel.php error Parameter XSS
The Bookings WordPress plugin was affected by a controlpanel.php error Parameter XSS security vulnerability...
WhiteBoard 0.1.30 Blind SQL Injection
WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities Name WhiteBoard Vendor http://sarosoftware.com Versions Affected 0.1.30 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-24 X. INDEX I. ABOUT THE...
WhiteBoard 0.1.30 - Multiple Blind SQL Injections
WhiteBoard 0.1.30 - Multiple Blind SQL Injections WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities Name WhiteBoard Vendor http://sarosoftware.com Versions Affected 0.1.30 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail d...
CVE-2004-2067
CVE-2004-2067: SQL injection in controlpanel.php of Jaws Framework and Content Management System 0.4 allows remote attackers to bypass authentication by injecting via the (1) user, (2) password, or (3) crypted_password parameters. Impact indicated as partial confidentiality/integrity/availability...
Jaws 0.20.30.4 - ControlPanel.php SQL Injection
Jaws 0.20.30.4 - ControlPanel.php SQL Injection source: https://www.securityfocus.com/bid/10826/info JAWS is reportedly affected by a remote SQL injection vulnerability. This issue occurs in the controlpanel.php script due to a failure of the application to properly sanitize user-supplied URI...
Jaws 0.2/0.3/0.4 - 'ControlPanel.php' SQL Injection
source: https://www.securityfocus.com/bid/10826/info JAWS is reportedly affected by a remote SQL injection vulnerability. This issue occurs in the controlpanel.php script due to a failure of the application to properly sanitize user-supplied URI parameter input before using it in an SQL query...