EUVD-2007-3069

Malware in sbrugna...

CVE-2007-3079

listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path...

Sql injection

SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the rank parameter...

Path traversal

listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path...

CVE-2007-3077

SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the rank parameter...

CVE-2007-3079

CVE-2007-3079 affects EQdkp 1.3.2c and earlier. The vulnerability lies in listmembers.php where an invalid compare parameter can disclose the server path, allowing remote attackers to obtain sensitive information. The connected documents do not provide remediation steps or exploit details beyond ...

CVE-2007-3077

CVE-2007-3077 affects EQdkp 1.3.2 and earlier. The vulnerability is an SQL injection in listmembers.php via the rank parameter, enabling remote execution of arbitrary SQL commands. Exploit details or specific patches are not provided in the connected documents; remediation information is not stat...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 listmembers.php and 2 stats.php. NOTE: some of these details are obtained from third party information...

eqdkp-xss.txt

In listmembers.php, $show fails to properly sanitize user-supplied input. It's non persistent XSS :-/ Example: $path-to-eqdkp/listmembers.php?show=%22%3E%3Cplaintext%3E kefka kefka at kevinbeardsucks.com...

EQdkp 1.3.1 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/23951/info EQDKP is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...