Ananta Gazelle CMS upload statement for registration and fix-vulnerability warning-the black bar safety net

The head of the table: Ananta Gazelle CMS - Update Statement Sql injection Author: hackme Download address: http://sourceforge.net/projects/ananta/files/stable/Gazelle 1.0 stable/AnantaGazelle1.0.zip/ Impact version: 1.0 stable Test platform: backbox 2.1 First for my bad English, sorry + This...

Gazelle CMS - Multiple Vulnerabilities

Gazelle CMS - Multiple Vulnerabilities Exploit Title: AnantaGazelle Local File inclusion / Xss Vulnerabilities Date: 23/08/2010 Author: Sweet Contact : [email protected] Software Link: www.anantasoft.com Download:http://www.anantasoft.com/index.php?Gazelle%20CMS/Download Version: AnantaGazelle1...

Ananta Gazelle 1.0 SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: Ananta Gazelle SQL Injection Vulnerability Vendor: http://www.anantasoft.com/ Vulnerable Version: 1.0 Latest version till now Exploitation: Remote with browser Fix: N/A - Description: Ananta Gazelle is a rich JavaScript enabled CMS with...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 inc/login.php, 3 admin/index.php, and 4 admin/forgot.php...

CVE-2010-0941: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 inc/login.php, 3 admin/index.php, and 4 admin/forgot.php...

CVE-2008-5977

SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the adname parameter in a Submit action...

CVE-2008-5977

CVE-2008-5977 affects PHP JOBWEBSITE PRO (siteadmin/forgot.php) where the adname parameter in a Submit action is vulnerable to SQL injection. The underlying issue is an improper handling of user-supplied input, enabling remote attackers to potentially execute arbitrary SQL commands. The vulnerabi...

CVE-2008-5977: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the adname parameter in a Submit action...

CVE-2008-5976: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers to inject arbitrary web script or HTML via 1 the adname parameter in a Submit action or 2 the UserName field...

phpjobwebsite-cmsqlxss.txt

--------------------------------------------------------- Portal Name: PHP JOBWEBSITE PRO Vendor : http://preproject.com Author : PouyaServer , [email protected] Vulnerability : CM,XSS,SQL --------------------------------------------------------- SQL:...

CVE-2006-4361

Multiple cross-site scripting XSS vulnerabilities in jobseekers/forgot.php in Diesel Job Site allow remote attackers to inject arbitrary web script or HTML via the 1 uname or 2 SEmail parameters...

CVE-2006-4361

Vulnerability detail (CVE-2006-4361): Diesel Job Site’s jobseekers/forgot.php suffers multiple XSS flaws that let remote attackers inject arbitrary web script/HTML via the (1) uname or (2) SEmail parameters. Affected: Diesel Job Site, file: jobseekers/forgot.php. Impact and remediation are not pr...

CVE-2006-4361: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in jobseekers/forgot.php in Diesel Job Site allow remote attackers to inject arbitrary web script or HTML via the 1 uname or 2 SEmail parameters...

DieselScripts Job Site - 'Forgot.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/19622/info Multiple cross-site scripting vulnerabilities affect Job Site because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may leverage these issues to have arbitra...

CVE-2006-3279: Undefined Security Weakness

Cross-site scripting XSS vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML via the 1 Sex parameter in index.php, 2 ProfileType parameter in joinform.php, and 3 Email parameter in forgot.php...

CVE-2006-2740

Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL commands via the 1 q parameter in a forgot.php, and the 2 username and 3 password parameters in b login.php, and other unspecified vectors...

CVE-2006-2741: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers to inject arbitrary web script or HTML via the q parameter in forgot.php, which is echoed in an error message, and other unspecified vectors...

CVE-2006-2740: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL commands via the 1 q parameter in a forgot.php, and the 2 username and 3 password parameters in b login.php, and other unspecified vectors...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in 1 eday.php, 2 eshow.php, or 3 forgot.php in albinator 2.0.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Configrootdir parameter...

CVE-2006-2182: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in 1 eday.php, 2 eshow.php, or 3 forgot.php in albinator 2.0.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Configrootdir parameter...