581 matches found
CVE-2012-0873: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 explain parameter to explanation.php or the 2 photosonly, 3 onlineonly, or 4 mode parameters to viewFriends.php...
PT-2012-2924
Name of the Vulnerable Software and Affected Versions Boonex Dolphin versions prior to 7.0.8 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the explain parameter to "explanation.php" or the photos only, online only, or mode parameter...
Dolphin 7.0.7 <= Multiple Cross Site Scripting Vulnerabilities
OVERVIEW Dolphin 7.0.7 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Dolphin is the only "all-in-one" free community software platform for creating your own social networking, community or online dating site without any limits and under your full control. Dolphin comes...
Dolphin 7.0.x - 'explanation.php?explain' Cross-Site Scripting
source: https://www.securityfocus.com/bid/52088/info Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Dolphin 7.0.x - 'viewFriends.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/52088/info Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Dolphin 7.0.x - explanation.php?explain Cross-Site Scripting
Dolphin 7.0.x - explanation.php?explain Cross-Site Scripting source: https://www.securityfocus.com/bid/52088/info Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
Dolphin 7.0.x - viewFriends.php Multiple Cross-Site Scripting Vulnerabilities
Dolphin 7.0.x - viewFriends.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52088/info Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
Dolphin 7.0.7 Cross Site Scripting
OVERVIEW Dolphin 7.0.7 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Dolphin is the only "all-in-one" free community software platform for creating your own social networking, community or online dating site without any limits and under your full control. Dolphin comes...
Dolphin <= 7.0.7 (member_menu_queries.php) Remote PHP Code Injection
-------------------------------------------------------------------- Dolphin = 7.0.7 membermenuqueries.php Remote PHP Code Injection -------------------------------------------------------------------- author...............: EgiX mail.................: n0b0d13satgmaildotcom software link........:...
[PT-2011-14] SQL injection vulnerability in BoonEx Dolphin
---------------------------------------------------------------------- PT-2011-14 Positive Technologies Security Advisory SQL injection vulnerability in BoonEx Dolphin 6.1 ---------------------------------------------------------------------- --- Vulnerable platform BoonEx Dolphin 6.1 Link:...
Boonex Dolphin 'xml/get_list.php' SQL Injection Vulnerability
Boonex Dolphin is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the...
Dolphin <= 6.0 SQLi Vulnerability
Boonex Dolphin is prone to an SQL injection SQLi vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
Boonex Dolphin 6.1 - get_list.php SQL Injection
Boonex Dolphin 6.1 - getlist.php SQL Injection source: https://www.securityfocus.com/bid/50286/info Boonex Dolphin is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an...
Boonex Dolphin 6.1 - 'get_list.php' SQL Injection
source: https://www.securityfocus.com/bid/50286/info Boonex Dolphin is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access o...
Dolphin 7.0.7 PHP Code Injection
$aItems 8...
Dolphin 7.0.7 - 'member_menu_queries.php' Remote PHP Code Injection
?php / ---------------------------------------------------------------------------- Dolphin = 7.0.7 membermenuqueries.php Remote PHP Code Injection Exploit ---------------------------------------------------------------------------- author...............: EgiX mail.................:...
Dolphin 7.0.7 - member_menu_queries.php Remote PHP Code Injection
Dolphin 7.0.7 - membermenuqueries.php Remote PHP Code Injection ?php / ---------------------------------------------------------------------------- Dolphin = 7.0.7 membermenuqueries.php Remote PHP Code Injection Exploit ----------------------------------------------------------------------------...
Dolphin <= 7.0.7 (member_menu_queries.php) Remote PHP Code Injection
Exploit for php platform in category web applications ?php / ---------------------------------------------------------------------------- Dolphin = 7.0.7 membermenuqueries.php Remote PHP Code Injection Exploit ----------------------------------------------------------------------------...
Dolphin <= 7.0.4 Information Disclosure Vulnerability
Dolphin is prone to an information disclosure vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...