9 matches found
EUVD-2006-6704
Malware in sbrugna...
Knusperleicht Shoutbox 2.6 Shout.php HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21637/info Knusperleicht Shoutbox is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code...
Knusperleicht Shoutbox index.php sb_include_path Parameter PHP Code Execution - Ver2 (CVE-2006-3989)
A code execution vulnerability has been reported in Knusperleicht Shoutbox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Knusperleicht Shoutbox index.php sb_include_path Parameter PHP Code Execution - Ver2 (CVE-2006-3989)
A code execution vulnerability has been reported in Knusperleicht Shoutbox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2006-6721
Multiple cross-site scripting XSS vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to inject arbitrary web script or HTML via the 1 sbNick or 2 sbKommentar parameter...
Knusperleicht Shoutbox 2.6 - 'Shout.php' HTML Injection
source: https://www.securityfocus.com/bid/21637/info Knusperleicht Shoutbox is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code in the context of the affected...
Knusperleicht ShoutBox SB_Include_Path远程文件包含漏洞
Knusperleicht ShoutBox是一款基于PHP的音乐管理程序。 Knusperleicht ShoutBox不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'index.php'脚本对用户提交的"SBINCLUDEPATH"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Knusperleicht ShoutBox 4.4 http://knusperleicht.at/index.php?knuspi=phpecke...
