Information disclosure

Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to obtain configuration information via a direct request to admin/adm/test.php, which calls the phpinfo function...

CVE-2007-3204

CVE-2007-3204 describes an SQL injection in auth.php of JFFNMS 0.8.4-pre2 , allowing remote attackers to execute arbitrary SQL commands via the pass parameter. This vulnerability is noted to stem from an incomplete fix for CVE-2007-3190. The connected sources confirm the flaw and its relation to ...

CVE-2007-3191

The vulnerability CVE-2007-3191 affects Just For Fun Network Management System (JFFNMS) version 0.8.3, where a direct request to admin/adm/test.php triggers phpinfo and exposes configuration information. Public sources among connected documents cite Debian’s DSA-1374-1 and the related Nessus/Open...

CVE-2007-3191

Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to obtain configuration information via a direct request to admin/adm/test.php, which calls the phpinfo function...

CVE-2007-3192

CVE-2007-3192 affects Just For Fun Network Management System (JFFNMS) 0.8.3. The issue allows remote attackers to read and modify configuration settings via direct requests to admin/setup.php, bypassing login restrictions. Debian advisories (DSA-1374-1) note fixes in jffnms 0.8.3dfsg.1-2.1etch1 (...

CVE-2007-3190

CVE-2007-3190 involves multiple SQL injection flaws in Just For Fun Network Management System (JFFNMS) 0.8.3, specifically in auth.php. The vulnerabilities allow remote attackers to execute arbitrary SQL commands via the user and pass parameters when magic_quotes_gpc is disabled. Public advisorie...

CVE-2007-3204

SQL injection vulnerability in auth.php in Just For Fun Network Management System JFFNMS 0.8.4-pre2 allows remote attackers to execute arbitrary SQL commands via the pass parameter. NOTE: this issue reportedly exists because of an initial incomplete fix for CVE-2007-3190. The provenance of this...

CVE-2007-3189

Cross-site scripting XSS vulnerability in auth.php in Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter...

CVE-2007-3189

The CVE-2007-3189 entry relates to a Cross-site scripting (XSS) vulnerability in JFFNMS 0.8.3, where an attacker can inject script via the user parameter in auth.php. Affected product: Just For Fun Network Management System (JFFNMS) 0.8.3. Impact: remote script/HTML injection as described. Remedi...

CVE-2007-3190

Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System JFFNMS 0.8.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 user and 2 pass parameters...

JFFNMS auth.php Multiple Parameter SQL Injection

The remote host is running JFFNMS, an open source network management and monitoring system. The version of JFFNMS on the remote host fails to properly sanitize user-supplied input to the 'user' parameter before using it in the 'lib/api.classes.inc.php' script in database queries. If PHP's...

JFFNms 0.8.3 - auth.php Multiple SQL Injections

JFFNms 0.8.3 - auth.php Multiple SQL Injections source: https://www.securityfocus.com/bid/24414/info Just For Fun Network Management and Monitoring System JFFNMS is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple...

JFFNms 0.8.3 - 'admin/adm/test.php' PHP Information Disclosure

source: https://www.securityfocus.com/bid/24414/info Just For Fun Network Management and Monitoring System JFFNMS is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple information-disclosure issues. An attacker can exploit these...

JFFNms 0.8.3 - auth.php?user Cross-Site Scripting

JFFNms 0.8.3 - auth.php?user Cross-Site Scripting source: https://www.securityfocus.com/bid/24414/info Just For Fun Network Management and Monitoring System JFFNMS is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple...

JFFNms 0.8.3 - 'auth.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/24414/info Just For Fun Network Management and Monitoring System JFFNMS is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple information-disclosure issues. An attacker can exploit these...

JFFNms 0.8.3 - 'auth.php?user' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24414/info Just For Fun Network Management and Monitoring System JFFNMS is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple information-disclosure issues. An attacker can exploit these...

JFFNms 0.8.3 - adminadmtest.php PHP Information Disclosure

JFFNms 0.8.3 - adminadmtest.php PHP Information Disclosure source: https://www.securityfocus.com/bid/24414/info Just For Fun Network Management and Monitoring System JFFNMS is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple...

JFFNms 0.8.3 - adminsetup.php Direct Request Authentication Bypass

JFFNms 0.8.3 - adminsetup.php Direct Request Authentication Bypass source: https://www.securityfocus.com/bid/24414/info Just For Fun Network Management and Monitoring System JFFNMS is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and...

JFFNms 0.8.3 - 'admin/setup.php' Direct Request Authentication Bypass

source: https://www.securityfocus.com/bid/24414/info Just For Fun Network Management and Monitoring System JFFNMS is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple information-disclosure issues. An attacker can exploit these...