25 matches found
EUVD-2008-3335
Malware in sbrugna...
EUVD-2004-0073
Malware in sbrugna...
EUVD-2008-3334
Malware in sbrugna...
EasyDynamicPages 1.0 config_page.php Remote PHP File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9338/info EasyDynamicPages is prone to a remote file include vulnerability in a configuration script. This will permit a remote attack to include malicious PHP scripts from remote servers, which will then be executed by t...
Easy Publish 3.0 Cross Site Scripting
-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
Easydynamicpages 30tr Exploit
No description provided by source. !/usr/bin/perl ---------------------------------------------------------------- Script : Easydynamicpages 30tr Type : Multipe Vulerabilities Xss / Sql Injection Exploit / File Disclosure Exploit Variable Method : GET Alert : High...
Sql injection
SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to execute arbitrary SQL commands via the read parameter...
CVE-2008-3348
Cross-site scripting XSS vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to inject arbitrary web script or HTML via the year parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to inject arbitrary web script or HTML via the year parameter...
CVE-2008-3347
SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to execute arbitrary SQL commands via the read parameter...
CVE-2008-3348
Cross-site scripting XSS vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to inject arbitrary web script or HTML via the year parameter...
CVE-2008-3347
The CVE-2008-3347 entry describes an SQL injection in MyioSoft EasyDynamicPages 3.0 trial edition (tr) affecting staticpages/easycalendar/index.php, exploitable via the read parameter to allow remote SQL commands. The base score is 7.5 (HIGH) per NVD, with network attack vector and low complexity...
CVE-2008-3348
The CVE-2008-3348 issue affects MyioSoft EasyDynamicPages 3.0 trial edition (tr). The vulnerable component is staticpages/easycalendar/index.php, where the year parameter enables cross-site scripting (XSS). The underlying effect is that remote attackers can inject arbitrary web script or HTML, po...
CVE-2008-3347
SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition tr allows remote attackers to execute arbitrary SQL commands via the read parameter...
Easydynamicpages 30tr Multipe Vulerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit )
!/usr/bin/perl ---------------------------------------------------------------- Script : Easydynamicpages 30tr Type : Multipe Vulerabilities Xss / Sql Injection Exploit / File Disclosure Exploit Variable Method : GET Alert : High ----------------------------------------------------------------...
EasyDynamicPages 3.0 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities
EasyDynamicPages 3.0 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30305/info EasyDynamicPages is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to...
EasyDynamicPages 3.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/30305/info EasyDynamicPages is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...
easydynamicpages-sqlxssdisclose.txt
!/usr/bin/perl ---------------------------------------------------------------- Script : Easydynamicpages 30tr Type : Multipe Vulerabilities Xss / Sql Injection Exploit / File Disclosure Exploit Variable Method : GET Alert : High ----------------------------------------------------------------...
CVE-2004-0073
PHP remote file inclusion vulnerability in 1 config.php and 2 configpage.php for EasyDynamicPages 2.0 allows remote attackers to execute arbitrary PHP code by modifying the edprelativepath parameter to reference a URL on a remote web server that contains a malicious serverdata.php script...
CVE-2004-0073
CVE-2004-0073 affects EasyDynamicPages 2.0 via a PHP remote file inclusion in the edp_relative_path parameter of config.php and config_page.php. An attacker can reference a URL on a remote server containing a malicious serverdata.php to cause the web server to execute arbitrary PHP code. The vuln...