EUVD-2006-2349

Malware in sbrugna...

EUVD-2006-2348

Malware in sbrugna...

eBD-en.txt

=============================== - Advisory - =============================== Tittle: Several flaws in e-business designer Risk: Critical Date: 03.May.2006 Author: Pedro Andújar URL: http://www.digitalsec.es http://www.514.es/ .: INTRO :. eBD is an Integrated Development Environment for the...

eBD-es.txt

=============================== - Advisory - =============================== Título: Múltiples vulnerabilidades en e-business designer Gravedad: Crítica Fecha: 03.May.2006 Autor: Pedro Andújar WEB: http://www.digitalsec.es http://www.514.es/ .: INTRODUCCIÓN :. eBD es una potente herramienta de...

CVE-2006-2347

E-Business Designer eBD 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via "'" characters, and possibly other invalid values, in 1 the id parameter to formgrupo.html, or requests to the 2 archivos/ and 3 files/ directories. NOTE: this issue might be resultant...

CVE-2006-2349

E-Business Designer eBD 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to 1 common/htmleditor/imagebrowser.upload.html, 2 common/htmleditor/imagebrowser.html, or 3 common/htmleditor/htmleditor.html. NOTE: this can al...

CVE-2006-2348

Cross-site scripting XSS vulnerability in formgrupo.html in E-Business Designer eBD 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...

Cross site scripting

E-Business Designer eBD 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to 1 common/htmleditor/imagebrowser.upload.html, 2 common/htmleditor/imagebrowser.html, or 3 common/htmleditor/htmleditor.html. NOTE: this can al...

Cross site scripting

Cross-site scripting XSS vulnerability in formgrupo.html in E-Business Designer eBD 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...

Sql injection

E-Business Designer eBD 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via "'" characters, and possibly other invalid values, in 1 the id parameter to formgrupo.html, or requests to the 2 archivos/ and 3 files/ directories. NOTE: this issue might be resultant...

CVE-2006-2347

E-Business Designer eBD 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via "'" characters, and possibly other invalid values, in 1 the id parameter to formgrupo.html, or requests to the 2 archivos/ and 3 files/ directories. NOTE: this issue might be resultant...

CVE-2006-2348

The CVE-2006-2348 entry concerns an XSS vulnerability in the E-Business Designer (eBD) form_grupo.html page (versions 3.1.4 and earlier). The vulnerability allows remote attackers to inject arbitrary script/HTML via the id parameter, with the underlying note suggesting a potential root cause rela...

CVE-2006-2349

E-Business Designer eBD 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to 1 common/htmleditor/imagebrowser.upload.html, 2 common/htmleditor/imagebrowser.html, or 3 common/htmleditor/htmleditor.html. NOTE: this can al...

CVE-2006-2348

Cross-site scripting XSS vulnerability in formgrupo.html in E-Business Designer eBD 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...

CVE-2006-2349

CVE-2006-2349 affects E-Business Designer (eBD) 3.1.4 and earlier. The vulnerability allows remote attackers to upload or modify arbitrary files and execute arbitrary code via direct requests to (1) common/html_editor/image_browser.upload.html, (2) common/html_editor/image_browser.html, or (3) co...

CVE-2006-2347

The CVE-2006-2347 entry concerns E-Business Designer (eBD) 3.1.4 and earlier. The vulnerability allows remote attackers to reveal the web server’s full path by supplying special values (e.g., a single quote) to the id parameter in form_grupo.html or by requesting the archivos/ and files/ director...

Several flaws in e-business designer

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =============================== - Advisory - =============================== Tittle: Several flaws in e-business designer Risk: Critical Date: 03.May.2006 Author: Pedro Andjar pandujar @ selfdefense.es URL: http://www.digitalsec.es http://www.514.es/ ...