CVE-2006-2689

CVE-2006-2689 describes multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier. The flaws allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) debut_image in article-album.php3, (2) date in rubrique.php3, and (3) perso and (4) a...

CVE-2006-2690

EVA-Web 2.1.2 and earlier contains a path-disclosure vulnerability in an unspecified script (likely index.php). Remote attackers can obtain the full server path via invalid parameters perso or aide. The CVSS v2 base score is 7.8 (HIGH). Exploitation status and concrete remediation are not provide...

EVA-Web 2.1.2 - index.php Multiple Cross-Site Scripting Vulnerabilities

EVA-Web 2.1.2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...

EVA-Web 2.1.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

EVA-Web 2.1.2 - 'rubrique.php3?date' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

EVA-Web 2.1.2 - 'article-album.php3?debut_image' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

EVA-Web 2.1.2 - rubrique.php3?date Cross-Site Scripting

EVA-Web 2.1.2 - rubrique.php3?date Cross-Site Scripting source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

EVA-Web 2.1.2 - article-album.php3?debut_image Cross-Site Scripting

EVA-Web 2.1.2 - article-album.php3?debutimage Cross-Site Scripting source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

EVA-Web <=2.1.2 vuln.

EVA-Web =2.1.2 vuln. Vuln. discovered by : r0t Date: 27 may 2006 vendor:http://spip-edu.edres74.net/ affected versions:2.1.2 and prior orginal advisory:http://pridels.blogspot.com/2006/05/eva-web-212-vuln.html Vuln. Description: EVA-Web contains a flaw that allows a remote cross site scripting...