EUVD-2006-2889

Malware in sbrugna...

EUVD-2006-2890

Malware in sbrugna...

GANTTy 1.0.3 Index.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18296/info GANTTy is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...

CVE-2006-2893

index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticate action...

Deserialization of untrusted data

index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticate action...

CVE-2006-2892

Cross-site scripting XSS vulnerability in index.php in GANTTy 1.0.3 allows remote attackers to inject arbitrary HTML and web script via the message parameter in a login action...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in GANTTy 1.0.3 allows remote attackers to inject arbitrary HTML and web script via the message parameter in a login action...

CVE-2006-2893

index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticate action...

CVE-2006-2892

CVE-2006-2892 is an XSS vulnerability in GANTTy 1.0.3, where the index.php login action accepts a message parameter that can be exploited to inject arbitrary HTML/JavaScript. The entry lists a CVSS v2 base score of 4.3 (Medium) with network attack vector, no confidentiality/availability impact, p...

CVE-2006-2893

CVE-2006-2893 affects GANTTy 1.0.3. The vulnerability occurs via an invalid lang parameter in an authenticate action, allowing remote attackers to obtain the full path of the web server. This is a path disclosure issue limited to the affected module/function and is documented across multiple sour...

CVE-2006-2892

Cross-site scripting XSS vulnerability in index.php in GANTTy 1.0.3 allows remote attackers to inject arbitrary HTML and web script via the message parameter in a login action...

GANTTy v1.0.3

GANTTy v1.0.3 Homepage: http://www.gantty.com Effected files: index.php XSS Vulnerabilities PoC: XSS Vulnerability: http://www.example.com/index.php?action=login&message=IMG SRC=javascript:alert'XSS'+email&lang= Full path disclosure error: http://www.example.com/index.php?action=authenticate&lang...

GANTTy 1.0.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18296/info GANTTy is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

GANTTy 1.0.3 - index.php Cross-Site Scripting

GANTTy 1.0.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18296/info GANTTy is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...