CVE-2005-4262

CVE-2005-4262 is described as a cross-site scripting (XSS) vulnerability in the Envolution News module. The issue allows remote attackers to inject arbitrary web script or HTML through the (1) startrow and (2) catid parameters. The description notes this issue may be related to an SQL injection p...

CVE-2005-4262: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the News module in Envolution allows remote attackers to inject arbitrary web script or HTML via the 1 startrow and 2 catid parameter. NOTE: this issue might be resultant from the SQL injection problem CVE-2005-4263...

CVE-2005-4263: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands via the 1 startrow and 2 catid parameter...

News Module for Envolution - modules.php Multiple Cross-Site Scripting Vulnerabilities

News Module for Envolution - modules.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15857/info Envolution is prone to multiple input validation vulnerabilities. Successful exploitation of these vulnerabilities could result in a compromise of the...

News Module for Envolution - 'modules.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15857/info Envolution is prone to multiple input validation vulnerabilities. Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication...

News Module for Envolution - 'modules.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15857/info Envolution is prone to multiple input validation vulnerabilities. Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication...

envo.txt

Description: eNvolution is a fork of PostNuke. The entire core of the product is being replaced and improved, making it far more secure and stable, and able to work in high-volume environments with ease. vendor: http://www.envolution.com Vulnerability: SQL injection AND XSS sploit...

News Module for Envolution - modules.php Multiple SQL Injections

News Module for Envolution - modules.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15857/info Envolution is prone to multiple input validation vulnerabilities. Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or...