EUVD-2006-2064

Malware in sbrugna...

EUVD-2006-2063

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to execute arbitrary SQL commands via the 1 banner parameter in agentlinks.pl; the offset parameter in 2 agentlinks.pl, 3 agenttransactions.pl, 4...

CVE-2006-2063

Multiple cross-site scripting XSS vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to inject arbitrary web script or HTML via the login parameter in 1 agentaffil.pl, 2 agenthelp.pl, 3 agentfaq.pl, 4 agenthelpinsert.pl, 5...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to inject arbitrary web script or HTML via the login parameter in 1 agentaffil.pl, 2 agenthelp.pl, 3 agentfaq.pl, 4 agenthelpinsert.pl, 5...

CVE-2006-2062

Multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to execute arbitrary SQL commands via the 1 banner parameter in agentlinks.pl; the offset parameter in 2 agentlinks.pl, 3 agenttransactions.pl, 4...

CVE-2006-2062

Multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to execute arbitrary SQL commands via the 1 banner parameter in agentlinks.pl; the offset parameter in 2 agentlinks.pl, 3 agenttransactions.pl, 4...

CVE-2006-2063

CVE-2006-2063 involves multiple cross-site scripting (XSS) vulnerabilities in Leadhound Full and LITE 2.1 (and likely the Network Version “Full Version”). The weaknesses allow injection of arbitrary script/HTML via the login parameter across a long list of PHP scripts (e.g., agent_affil.pl, agent...

CVE-2006-2062

CVE-2006-2062 involves multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1 (and likely the Network Version “Full Version”). The description lists specific injectable parameters across scripts: (1) banner in agent_links.pl; (2) offset in agent_links.pl; (3) agent_transactions.pl;...

CVE-2006-2063

Multiple cross-site scripting XSS vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to inject arbitrary web script or HTML via the login parameter in 1 agentaffil.pl, 2 agenthelp.pl, 3 agentfaq.pl, 4 agenthelpinsert.pl, 5...

Leadhound multiple vuln.

Leadhound multiple vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendor:http://www.leadhoundnetwork.com/ affected versions: Leadhound "Full Remote version" & Leadhound LITE 2.1 orginal advisory: http://pridels.blogspot.com/2006/04/leadhound-multiple-vuln.html Product info: Secure private...