EUVD-2005-3836

Malware in sbrugna...

EUVD-2011-3707

Malware in sbrugna...

CVE-2011-3750

kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by getid3/getid3/write.id3v1.php and certain other files...

CVE-2011-3750

kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by getid3/getid3/write.id3v1.php and certain other files...

Information disclosure

kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by getid3/getid3/write.id3v1.php and certain other files...

CVE-2011-3750

The CVE-2011-3750 entry describes a information-disclosure vulnerability in kPlaylist 1.8.502. An unauthenticated remote attacker can trigger direct requests to certain PHP files (e.g., getid3/getid3/write.id3v1.php) and receive error messages that reveal the installation path, exposing sensitive...

CVE-2011-3750

kPlaylist 1.8.502 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by getid3/getid3/write.id3v1.php and certain other files...

CVE-2005-3841

Cross-site scripting XSS vulnerability in kPlaylist 1.6 build 400, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter...

CVE-2005-3841

CVE-2005-3841 is a cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400) and possibly other versions. The flaw allows remote attackers to inject arbitrary web script or HTML through the searchfor parameter. According to the provided data, the impact is limited to confidentiality a...

CVE-2005-3841

Cross-site scripting XSS vulnerability in kPlaylist 1.6 build 400, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter...

kPlaylist XSS vuln.

kPlaylist XSS vuln. Vuln. dicovered by : r0t Date 23 nov. 2005 Vendor:http://www.kplaylist.net/ affected version: Tested on 1.6 build 400 ,can be affected till last 1.6 build 411 . Vuln. Description Input passed to the search parameters isn't properly sanitised before being returned to the user...