EUVD-2009-3239

Malware in sbrugna...

EUVD-2009-3244

Malware in sbrugna...

EUVD-2009-3243

Malware in sbrugna...

CVE-2009-3260

Cross-site scripting XSS vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment...

CVE-2009-3261

update/update0.1.2to0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors...

CVE-2009-3256

Cross-site scripting XSS vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the URI, as demonstrated by a SCRIPT element in an arbitrary parameter such as the asd parameter...

PT-2013-76: Local File Inclusion in LiveStreet CMS

The specialists of the Positive Research center have detected a Local File Inclusion vulnerability in LiveStreet CMS. Insufficient validation of user input in the install\index.php script allows remote attackers to include files located on the attacked server and thus execute a PHP code. It may...

LiveStreet 0.5.1 Cross Site Scripting

Exploit for php platform in category web applications LiveStreet Cross-Site Scripting Vulnerabilities & disclosure of directory Vulnerable: LiveStreet 0.5.1 http://livestreetcms.com/download/ Remote: Yes Local: No Credit: HiMIC Babichev Igor Livestreet XSS POST: File:...

LiveStreet 0.5.1 Cross Site Scripting

LiveStreet Cross-Site Scripting Vulnerabilities & disclosure of directory Vulnerable: LiveStreet 0.5.1 http://livestreetcms.com/download/ Remote: Yes Local: No Credit: HiMIC Babichev Igor Livestreet XSS POST: File: /engine/lib/external/MooTools1.2/plugs/vlaCal-v2.1/inc/year.php...

LiveStreet 0.4.2 Cross Site Scripting

------------------------------------------------------------------------ Software................LiveStreet 0.4.2 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://livestreetcms.com/ Discovery Date..........4/3/2011 Tested...

LiveStreet v0.2 Xss Vulnerability

Exploit for unknown platform in category web applications ================================= LiveStreet v0.2 Xss Vulnerability ================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

CVE-2009-3260

Cross-site scripting XSS vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment...

CVE-2009-3261

update/update0.1.2to0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors...

Authentication flaw

update/update0.1.2to0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment...

CVE-2009-3260

CVE-2009-3260 describes a Cross-site scripting (XSS) vulnerability in LiveStreet 0.2. The issue allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment. The provided sources consistently identify LiveStreet 0.2 as affected and the exploit path as th...

CVE-2009-3260

Cross-site scripting XSS vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment...

CVE-2009-3261

update/update0.1.2to0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors...

CVE-2009-3261

CVE-2009-3261 affects LiveStreet 0.2, where update/update_0.1.2_to_0.2.php does not require administrative authentication, enabling remote attackers to trigger DROP TABLE operations via unspecified vectors. Root cause is missing admin auth for the vulnerable update script. Documents do not provid...

Cross site scripting

Cross-site scripting XSS vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the URI, as demonstrated by a SCRIPT element in an arbitrary parameter such as the asd parameter...