563 matches found
CVE-2012-0873
Multiple cross-site scripting XSS vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 explain parameter to explanation.php or the 2 photosonly, 3 onlineonly, or 4 mode parameters to viewFriends.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 explain parameter to explanation.php or the 2 photosonly, 3 onlineonly, or 4 mode parameters to viewFriends.php...
CVE-2012-0873
CVE-2012-0873 : BoonEx Dolphin prior to 7.0.8 contains multiple stored/reflective XSS vulnerabilities in the web UI, exploitable via parameters (explain in explanation.php; photos_only, online_only, or mode in viewFriends.php). Affected versions include 7.0.7 and earlier; an attacker could inject...
CVE-2012-0873
Multiple cross-site scripting XSS vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 explain parameter to explanation.php or the 2 photosonly, 3 onlineonly, or 4 mode parameters to viewFriends.php...
CVE-2012-0873: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 explain parameter to explanation.php or the 2 photosonly, 3 onlineonly, or 4 mode parameters to viewFriends.php...
Dolphin 7.0.7 <= Multiple Cross Site Scripting Vulnerabilities
OVERVIEW Dolphin 7.0.7 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Dolphin is the only "all-in-one" free community software platform for creating your own social networking, community or online dating site without any limits and under your full control. Dolphin comes...
Dolphin 7.0.x - viewFriends.php Multiple Cross-Site Scripting Vulnerabilities
Dolphin 7.0.x - viewFriends.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52088/info Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
Dolphin 7.0.x - explanation.php?explain Cross-Site Scripting
Dolphin 7.0.x - explanation.php?explain Cross-Site Scripting source: https://www.securityfocus.com/bid/52088/info Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
Dolphin 7.0.7 Cross Site Scripting
OVERVIEW Dolphin 7.0.7 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Dolphin is the only "all-in-one" free community software platform for creating your own social networking, community or online dating site without any limits and under your full control. Dolphin comes...
Dolphin 7.0.x - 'explanation.php?explain' Cross-Site Scripting
source: https://www.securityfocus.com/bid/52088/info Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Dolphin 7.0.x - 'viewFriends.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52088/info Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
[PT-2011-14] SQL injection vulnerability in BoonEx Dolphin
---------------------------------------------------------------------- PT-2011-14 Positive Technologies Security Advisory SQL injection vulnerability in BoonEx Dolphin 6.1 ---------------------------------------------------------------------- --- Vulnerable platform BoonEx Dolphin 6.1 Link:...
Dolphin <= 7.0.7 (member_menu_queries.php) Remote PHP Code Injection
-------------------------------------------------------------------- Dolphin = 7.0.7 membermenuqueries.php Remote PHP Code Injection -------------------------------------------------------------------- author...............: EgiX mail.................: n0b0d13satgmaildotcom software link........:...
Boonex Dolphin 'xml/get_list.php' SQL Injection Vulnerability
Boonex Dolphin is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the...
Dolphin <= 6.0 SQLi Vulnerability
Boonex Dolphin is prone to an SQL injection SQLi vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
Boonex Dolphin 6.1 - get_list.php SQL Injection
Boonex Dolphin 6.1 - getlist.php SQL Injection source: https://www.securityfocus.com/bid/50286/info Boonex Dolphin is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an...
Boonex Dolphin 6.1 - 'get_list.php' SQL Injection
source: https://www.securityfocus.com/bid/50286/info Boonex Dolphin is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access o...
Dolphin 7.0.7 - 'member_menu_queries.php' Remote PHP Code Injection
?php / ---------------------------------------------------------------------------- Dolphin = 7.0.7 membermenuqueries.php Remote PHP Code Injection Exploit ---------------------------------------------------------------------------- author...............: EgiX mail.................:...
Dolphin 7.0.7 - member_menu_queries.php Remote PHP Code Injection
Dolphin 7.0.7 - membermenuqueries.php Remote PHP Code Injection ?php / ---------------------------------------------------------------------------- Dolphin = 7.0.7 membermenuqueries.php Remote PHP Code Injection Exploit ----------------------------------------------------------------------------...