Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when registerglobals and allowfopenurl are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the ROOTDIR parameter to 1 createemails.inc.php and 2 sendemails.inc.php in...

CVE-2007-1060

Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when registerglobals and allowfopenurl are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the ROOTDIR parameter to 1 createemails.inc.php and 2 sendemails.inc.php in...

CVE-2007-1060

Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when registerglobals and allowfopenurl are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the ROOTDIR parameter to 1 createemails.inc.php and 2 sendemails.inc.php in...

CVE-2007-1060

Interspire SendStudio

Interspire FastFind - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20380/info Interspire FastFind is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user...

interspireXSS.txt

I.Vulnerability Interspire TrackPoint NX Cross Site Scripting Vulnerability II.Vendor Interspire www.interspire.com III.Affected Systems - Interspire TrackPoint NX 0.1 IV.About TrackPoint is a web based sales tracking software. V.Description An attacker is able to inject HTML and client-side scri...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter when using the Login page...

CVE-2006-0210

Cross-site scripting XSS vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter when using the Login page...

CVE-2006-0210

Cross-site scripting XSS vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter when using the Login page...

CVE-2006-0210

CVE-2006-0210 is a Cross-site Scripting (XSS) vulnerability in Interspire TrackPoint NX prior to 0.1. The issue occurs in index.php and allows remote attackers to inject arbitrary web script or HTML via the username parameter on the Login page. This is the concrete vulnerability described in the ...

Interspire TrackPoint NX XSS Vulnerability

I.Vulnerability Interspire TrackPoint NX Cross Site Scripting Vulnerability II.Vendor Interspire www.interspire.com III.Affected Systems - Interspire TrackPoint NX 0.1 IV.About TrackPoint is a web based sales tracking software. V.Description An attacker is able to inject HTML and client-side scri...

CVE-2005-4024

Cross-site scripting XSS vulnerability in Interspire FastFind 2004 and 2005 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2005-4024

Cross-site scripting XSS vulnerability in Interspire FastFind 2004 and 2005 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2005-4024

Interspire FastFind 2004 and 2005 are affected by a Cross-site Scripting (XSS) vulnerability exploitable via the query parameter, enabling remote script/HTML injection. CVSS v2.0 base score 4.3 (low-medium) with user interaction not required and partial integrity impact. The CVE entry cites the a...

Interspire FastFind 2005 XSS vuln.

Interspire FastFind 2005 XSS vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/interspire-fastfind-2005-xss-vuln.html Vendor:http://www.interspire.com/fastfind/ affected version: 2005 and 2004 version. Product Description: Add powerful, flexible...

CVE-2005-3726

SQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute arbitrary SQL commands via the Query parameter...

CVE-2005-3726

Interspire ArticleLive NX 0.3 contains an SQL injection vulnerability exploitable via the Query parameter. The affected software is Interspire ArticleLive NX 0.3, with the root cause described as improper handling of the Query parameter leading to arbitrary SQL execution. According to NVD, the CV...

CVE-2005-3726

SQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute arbitrary SQL commands via the Query parameter...

[SA17585] Interspire ArticleLive NX "Query" SQL Injection Vulnerability

TITLE: Interspire ArticleLive NX "Query" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA17585 VERIFY ADVISORY: http://secunia.com/advisories/17585/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Interspire ArticleLive NX http://secunia.com/product/6140...

articleLive2005.txt

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah SPECIAL OFFER Hire my auditing services, if I dont fin...