Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML via the 1 "an" parameter to agenda.php or 2 cat parameter to mobile/thread.php...

CVE-2013-5983

Multiple cross-site scripting XSS vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML via the 1 "an" parameter to agenda.php or 2 cat parameter to mobile/thread.php...

CVE-2013-5983

CVE-2013-5983 concerns GuppyY before 4.6.28, which has two XSS vulnerabilities caused by insufficient sanitisation of user input in the GET parameters: the “an” parameter to agenda.php and the “cat” parameter to mobile/thread.php. The issues allow remote attackers to inject arbitrary HTML/JavaScr...

Cross-Site Scripting (XSS) in GuppY

Advisory ID: HTB23176 Product: GuppY Vendor: GuppY Vulnerable Versions: 4.6.26 and probably prior Tested Version: 4.6.26 Advisory Publication: October 2, 2013 without technical details Vendor Notification: October 2, 2013 Vendor Patch: October 12, 2013 Public Disclosure: October 23, 2013...

GuppY 4.6.26 Cross Site Scripting

Advisory ID: HTB23176 Product: GuppY Vendor: GuppY Vulnerable Versions: 4.6.26 and probably prior Tested Version: 4.6.26 Advisory Publication: October 2, 2013 without technical details Vendor Notification: October 2, 2013 Vendor Patch: October 12, 2013 Public Disclosure: October 23, 2013...

Cross-Site Scripting (XSS) in GuppY

High-Tech Bridge Security Research Lab discovered two XSS vulnerabilities in GuppY, which can be exploited to perform Cross-Site Scripting attacks against users of vulnerable application. 1 Cross-Site Scripting XSS in GuppY: CVE-2013-5983 1.1 The vulnerability exists due to insufficient...

GuppY存在未明安全漏洞

Bugtraq ID: 47863 Guppy一款来自法国的CMS系统。 Guppy存在未明安全漏洞，目前没有详细漏洞细节提供 Guppy GuppY 4.6.3 Guppy GuppY 4.6 Guppy GuppY 4.6.13a 厂商解决方案 GuppY 4.6.14已经修复此漏洞，建议用户下载使用： http://www.freeguppy.org/...

GuppY v4.6.14 (XSRF) Change Admin Account Settings

Exploit for php platform in category web applications...

GuppY 4.6.14 Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

GuppY 4.6.14 SQL Injection

´´´´´´´´´´´´´´´´´´´´´¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´´´´¶¶¶¶¶¶´´´´´´´´´´´´´¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´ ´´´´´´´´´´´´´¶¶¶´´´´´´´´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´´´´ ´´´´´´´´´´´´¶¶´´´´´´´´´ ´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´...

GuppY 4.6.14 - lng Multiple SQL Injections

GuppY 4.6.14 - lng Multiple SQL Injections source: https://www.securityfocus.com/bid/47086/info GuppY is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

GuppY 4.6.14 - 'lng' Multiple SQL Injections

source: https://www.securityfocus.com/bid/47086/info GuppY is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access ...

Sql injection

SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands via the lng parameter...

CVE-2010-1740

SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands via the lng parameter...

CVE-2010-1740

GuppY CRM is affected: v4.5.18 contains an SQL injection in newsletter.php where the lng parameter is unsafely used, allowing a remote attacker to execute arbitrary SQL commands. No remediation or exploit specifics are provided in the supplied documents.

CVE-2010-1740

SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands via the lng parameter...

GuppY 4.5.18 Blind SQL Injection

======================================================================================== | Title : GuppY v4.5.18 Blind SQL/XPath injection Vulnerability | Author : indoushka | email : [email protected] | Dork : Site créé avec GuppY v4.5.18 © | Tested on: windows SP2 Français V.Pnx2 2.0 | Bug ...

GuppY 4.5.18 - Blind SQL Injection XPath Injection

GuppY 4.5.18 - Blind SQL Injection XPath Injection ======================================================================================== | Title : GuppY v4.5.18 Blind SQL/XPath injection Vulnerability | Author : indoushka | email : [email protected] | Dork : Site créé avec GuppY v4.5.18 © ...

GuppY v4.5.18 Blind SQL/XPath injection Vulnerability

Exploit for php platform in category web applications ===================================================== GuppY v4.5.18 Blind SQL/XPath injection Vulnerability =====================================================...

GuppY 4.5.18 - Blind SQL Injection / XPath Injection

======================================================================================== | Title : GuppY v4.5.18 Blind SQL/XPath injection Vulnerability | Author : indoushka | email : [email protected] | Dork : Site créé avec GuppY v4.5.18 © | Tested on: windows SP2 Français V.Pnx2 2.0 | Bug ...