EUVD-2007-1385

Malware in sbrugna...

EUVD-2007-1386

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in dynaliens 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 recherche.php3 or 2 ajouter.php3...

CVE-2007-1389

dynaliens 2.0 and 2.1 allows remote attackers to bypass authentication and perform certain privileged actions via a direct request for 1 validlien.php3 2 supprlien.php3 3 supprub.php3 4 validlien.php3 5 confsuppr.php3 6 modiflien.php3, or 7 confmodif.php3 in admin/...

CVE-2007-1389

dynaliens 2.0 and 2.1 allows remote attackers to bypass authentication and perform certain privileged actions via a direct request for 1 validlien.php3 2 supprlien.php3 3 supprub.php3 4 validlien.php3 5 confsuppr.php3 6 modiflien.php3, or 7 confmodif.php3 in admin/...

CVE-2007-1389

CVE-2007-1389 affects dynaliens 2.0 and 2.1. The issue allows remote attackers to bypass authentication and perform certain privileged actions by directly requesting admin scripts: validlien.php3, supprlien.php3, supprub.php3, validlien.php3, confsuppr.php3, modiflien.php3, or confmodif.php3 in a...

CVE-2007-1390

CVE-2007-1390 affects dynaliens 2.0 and 2.1, with multiple cross-site scripting (XSS) vulnerabilities exposed via unspecified parameters to recherche.php3 and ajouter.php3. The root cause is improper handling/sanitization of user input leading to injected arbitrary web script/HTML. Remote attacke...

CVE-2007-1390

Multiple cross-site scripting XSS vulnerabilities in dynaliens 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 recherche.php3 or 2 ajouter.php3...

CVE-2007-1389: Undefined Security Weakness

dynaliens 2.0 and 2.1 allows remote attackers to bypass authentication and perform certain privileged actions via a direct request for 1 validlien.php3 2 supprlien.php3 3 supprub.php3 4 validlien.php3 5 confsuppr.php3 6 modiflien.php3, or 7 confmodif.php3 in admin/...

CVE-2007-1390: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in dynaliens 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 recherche.php3 or 2 ajouter.php3...

dynaliens v2.0/v2.1 bypass admin authentification + XSS

dynaliens v2.0/v2.1 bypass admin authentification + XSS By : sn0oPy Risk : high site : http://www.spiderforce.fr.st/ Dork : inurl:"/dynaliens" exploit : normaly when we add "/admin" to the link, like that http://www.target.ma/dynaliens/admin we are face to face with a restricted zone area, but if...