CVE-2006-4895

The CVE-2006-4895 issue affects IDevSpot NexieAffiliate 1.9 and earlier. Affected component/entry point is delete.php, where a modified id parameter enables remote attackers to delete arbitrary affiliates. This describes an input manipulation vulnerability that permits unauthorized modification/d...

CVE-2006-4894

CVE-2006-4894 is an XSS vulnerability in iDevSpot NixieAffiliate (versions 1.9 and earlier), where an attacker can inject arbitrary script via the error parameter in forms/lostpassword.php. The CVE indicates a network-vector, with no authentication required and partial integrity impact. Affected:...

CVE-2006-4883

Multiple cross-site scripting XSS vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via 1 the stylesheet parameter in Feed.php or 2 the message parameter in status.php...

CVE-2006-4884

Multiple cross-site scripting XSS vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via 1 the suser parameter in support/rightbar.php, 2 the ticketid parameter in support/opentickets.php, and 3 the conspagetitle parameter in index.php. NOTE: th...

CVE-2006-4884

Multiple cross-site scripting XSS vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via 1 the suser parameter in support/rightbar.php, 2 the ticketid parameter in support/opentickets.php, and 3 the conspagetitle parameter in index.php. NOTE: th...

CVE-2006-4883

CVE-2006-4883 covers multiple cross-site scripting (XSS) vulnerabilities in IDevSpot BizDirectory. The issues allow remote attackers to inject arbitrary web script or HTML via (1) the stylesheet parameter in Feed.php and (2) the message parameter in status.php. The NVD entry lists a base score of...

CVE-2006-4884

CVE-2006-4884 concerns multiple XSS vulnerabilities in IDevSpot iSupport 1.8. The issue enables remote attackers to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php, (2) the ticket_id parameter in support/open_tickets.php, and (3) the cons_page_title paramet...

CVE-2006-4883

Multiple cross-site scripting XSS vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via 1 the stylesheet parameter in Feed.php or 2 the message parameter in status.php...

IDevSpot BizDirectory 1.9 - Multiple Cross-Site Scripting Vulnerabilities

IDevSpot BizDirectory 1.9 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20081/info IDevSpot BizDirectory is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may levera...

IDevSpot BizDirectory 1.9 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20081/info IDevSpot BizDirectory is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

CVE-2006-4747

Multiple cross-site scripting XSS vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via 1 the id parameter in delete.php and 2 the error parameter in error.php...

CVE-2006-4742

Cross-site scripting XSS vulnerability in useradd.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2006-4741

PHP remote file inclusion vulnerability in bitslistings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary code via the svrrootPhpStart parameter...

CVE-2006-4747

CVE-2006-4747 involves multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds. The affected components are the scripts handling user input, specifically the parameters: (1) id in delete.php and (2) error in error.php, which attackers can abuse to inject arbitrary web script or HT...

CVE-2006-4741

PHP remote file inclusion vulnerability in bitslistings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary code via the svrrootPhpStart parameter...

CVE-2006-4742

Cross-site scripting XSS vulnerability in useradd.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2006-4742

The CVE describes an XSS vulnerability in IDevSpot PhpLinkExchange 1.0, specifically in the file user_add.php where the msg parameter can be exploited to inject arbitrary web script or HTML. The vulnerability is cross-site scripting and could allow an attacker to execute script in the context of ...

CVE-2006-4741

CVE-2006-4741 describes a PHP remote file inclusion vulnerability in bits_listings.php of IDevSpot PhpLinkExchange 1.0. The flaw allows remote attackers to execute arbitrary code via the svr_rootPhpStart parameter. Affected product: IDevSpot PhpLinkExchange 1.0 (bits_listings.php). Root cause: im...

CVE-2006-4747

Multiple cross-site scripting XSS vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via 1 the id parameter in delete.php and 2 the error parameter in error.php...

IDevSpot iSupport 1.8 - index.php?cons_page_title Cross-Site Scripting

IDevSpot iSupport 1.8 - index.php?conspagetitle Cross-Site Scripting source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow a...