EUVD-2007-3391

Malware in sbrugna...

EUVD-2010-1097

Malware in sbrugna...

Improper access control

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/lebisoft.mdb...

CVE-2010-1065

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/lebisoft.mdb...

CVE-2010-1065

CVE-2010-1065 affects Lebisoft Ziyaretci Defteri 7.4 and 7.5. The vulnerability arises from storing sensitive data under the web root with insufficient access control, allowing remote attackers to download the database by directly requesting db/lebisoft.mdb. The available sources consistently des...

CVE-2010-1065

Lebisoft Ziyaretci Defteri 7.4 and 7.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/lebisoft.mdb...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in defteryaz.asp in Lebisoft zdefter 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 ad and 2 konu parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3405

Multiple cross-site scripting XSS vulnerabilities in defteryaz.asp in Lebisoft zdefter 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 ad and 2 konu parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3405

Multiple cross-site scripting XSS vulnerabilities in defteryaz.asp in Lebisoft zdefter 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 ad and 2 konu parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3405

CVE-2007-3405 describes multiple cross-site scripting (XSS) vulnerabilities in Lebisoft zdefter 4.0, specifically in defter_yaz.asp, where the parameters (1) ad and (2) konu can be abused to inject arbitrary web script or HTML. The vulnerability enables remote attackers to inject code via these u...