EUVD-2011-4943

Malware in sbrugna...

EUVD-2011-4942

Malware in sbrugna...

Infoproject Business Hero Multiple Vulnerabilities

No description provided by source...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to 1 nalozinaslov.php and 2 widget.dokumentilista.php...

CVE-2011-5040

Multiple cross-site scripting XSS vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to 1 nalozinaslov.php and 2 widget.dokumentilista.php...

CVE-2011-5039

Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters to login.php, 3 the filter parameter to widget.dokumentilista.php, and 4 the finnalogid parameter to nalozinaslov.php...

CVE-2011-5040

Infoproject Biznis Heroj is affected by multiple XSS vulnerabilities. The issue arises in the config parameter used by two components: nalozi_naslov.php and widget.dokumenti_lista.php, enabling remote attackers to inject arbitrary web script or HTML. The CVE-2011-5040 entry notes a NVD CVSSv2 bas...

CVE-2011-5039

Infoproject Biznis Heroj is affected by multiple SQL injection vulnerabilities. The issues allow remote attackers to inject SQL via (1) login.php parameters username and password, (2) filter parameter to widget.dokumenti_lista.php, and (4) fin_nalog_id parameter to nalozi_naslov.php. Root cause i...

CVE-2011-5040

Multiple cross-site scripting XSS vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to 1 nalozinaslov.php and 2 widget.dokumentilista.php...

PT-2011-5186

Name of the Vulnerable Software and Affected Versions Infoproject Biznis Heroj affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the username and password parameters to "login.php", the filter parameter to...

CVE-2011-5039: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters to login.php, 3 the filter parameter to widget.dokumentilista.php, and 4 the finnalogid parameter to nalozinaslov.php...

CVE-2011-5040: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to 1 nalozinaslov.php and 2 widget.dokumentilista.php...

PT-2011-5187

Name of the Vulnerable Software and Affected Versions Infoproject Biznis Heroj affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can...

Infoproject Biznis Heroj Authentication Bypass

Infoproject Biznis Heroj login.php Authentication Bypass Vulnerability Vendor: Infoproject DOO Product web page: http://www.biznisheroj.mk Affected version: Plus, Pro and Extra Summary: Biznis Heroj or Business Hero Áèçíèñ Õåðî¼ is the first software on the Macedonian market that will help you...

Infoproject Biznis Heroj (XSS/SQLi) Multiple Remote Vulnerabilities

Summary Biznis Heroj or Business Hero is the first software on the Macedonian market that will help you manage your business processes in your company, such as accounting, production, acquisition, archiving, inventory, and the Cloud. Using the Cloud technology, Biznis Heroj allows you to access t...

Infoproject Biznis Heroj (login.php) Authentication Bypass Vulnerability

Summary Biznis Heroj or Business Hero is the first software on the Macedonian market that will help you manage your business processes in your company, such as accounting, production, acquisition, archiving, inventory, and the Cloud. Using the Cloud technology, Biznis Heroj allows you to access t...

Infoproject Business Hero Multiple Vulnerabilities

Exploit for php platform in category web applications Infoproject Biznis Heroj login.php Authentication Bypass Vulnerability Vendor: Infoproject DOO Product web page: http://www.biznisheroj.mk Affected version: Plus, Pro and Extra Summary: Biznis Heroj or Business Hero Áèçíèñ Õåðî¼ is the first...

Infoproject Business Hero - Multiple Vulnerabilities

Infoproject Business Hero - Multiple Vulnerabilities Infoproject Biznis Heroj login.php Authentication Bypass Vulnerability Vendor: Infoproject DOO Product web page: http://www.biznisheroj.mk Affected version: Plus, Pro and Extra Summary: Biznis Heroj or Business Hero Áèçíèñ Õåðî¼ is the first...

Infoproject Biznis Heroj Cross Site Scripting / SQL Injection

Infoproject Biznis Heroj XSS/SQLi Multiple Remote Vulnerabilities Vendor: Infoproject DOO Product web page: http://www.biznisheroj.mk Affected version: Plus, Pro and Extra Summary: Biznis Heroj or Business Hero Áèçíèñ Õåðî¼ is the first software on the Macedonian market that will help you manage...

Infoproject Business Hero - Multiple Vulnerabilities

Infoproject Biznis Heroj login.php Authentication Bypass Vulnerability Vendor: Infoproject DOO Product web page: http://www.biznisheroj.mk Affected version: Plus, Pro and Extra Summary: Biznis Heroj or Business Hero Áèçíèñ Õåðî¼ is the first software on the Macedonian market that will help you...