EUVD-2006-6553

Malware in sbrugna...

GenesisTrader 1.0 form.php Arbitrary File Source Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/21595/info GenesisTrader is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include multiple information-disclosure...

CVE-2006-6570

CVE-2006-6570 describes an unrestricted file upload in upload.php of GenesisTrader 1.0. The vulnerability allows remote authenticated users to upload arbitrary files through unspecified vectors, possibly involving form.php and the ajoutfich “foap” action. The available sources indicate a high-sev...

CVE-2006-6571

GenesisTrader 1.0 is affected by multiple XSS in form.php. The vulnerability allows remote attackers to inject arbitrary script/HTML via the (1) cuve, (2) chem, (3) do parameters. Connected sources also record a CVSS v2 base score of 6.8 (Medium). No remediation details are provided in the suppli...