18 matches found
EUVD-2009-3688
Malware in sbrugna...
EUVD-2009-3687
Malware in sbrugna...
EUVD-2009-3689
Malware in sbrugna...
mcshoutbox 1.1 (sql/xss/shell) Multiple Vulnerabilities
No description provided by source. + MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org Homepage : http://www.maniacomputer.com/dload/MCshoutboxDownloadPage.html + SQL Injection Login Bypass - Note : magicquotesgpc =...
CVE-2009-3715
Multiple SQL injection vulnerabilities in scrlogin.php in MCshoutbox 1.1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...
CVE-2009-3714
Cross-site scripting XSS vulnerability in adminlogin.php in MCshoutbox 1.1 allows remote attackers to inject arbitrary web script or HTML via the loginerror parameter...
Sql injection
Multiple SQL injection vulnerabilities in scrlogin.php in MCshoutbox 1.1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...
Cross site scripting
Cross-site scripting XSS vulnerability in adminlogin.php in MCshoutbox 1.1 allows remote attackers to inject arbitrary web script or HTML via the loginerror parameter...
CVE-2009-3715
MCshoutbox 1.1 is affected by multiple SQL injection vulnerabilities in scr_login.php, exploitable when magic_quotes_gpc is disabled. Attacks can remotely inject SQL via the username and password fields, potentially yielding arbitrary SQL execution. OpenVAS also notes related web vulnerabilities ...
CVE-2009-3715
Multiple SQL injection vulnerabilities in scrlogin.php in MCshoutbox 1.1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...
CVE-2009-3714
Cross-site scripting XSS vulnerability in adminlogin.php in MCshoutbox 1.1 allows remote attackers to inject arbitrary web script or HTML via the loginerror parameter...
CVE-2009-3714
CVE-2009-3714 affects MCshoutbox 1.1; the XSS flaw is in admin_login.php and is exploitable by providing a crafted loginerror parameter to inject arbitrary scripts/HTML into the victim’s browser. The public documents describe the vulnerability type and affected component but do not specify a patc...
CVE-2009-3716
CVE-2009-3716 describes an unrestricted file upload vulnerability in MCshoutbox 1.1. The flaw exists in the admin.php upload handling, allowing remote authenticated users to upload a file with an executable extension and then access it via a direct request to the file under the smilies/ directory...
MCshoutbox 1.1 SQL Injection / XSS / Shell Upload
MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org Homepage : http://www.maniacomputer.com/dload/MCshoutboxDownloadPage.html + SQL Injection Login Bypass - Note : magicquotesgpc = off - Vulnerable code in...
MCshoutbox 1.1 (SQL/XSS/Shell) Multiple Remote Vulnerabilities
No description provided by source. + MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org Homepage : http://www.maniacomputer.com/dload/MCshoutboxDownloadPage.html + SQL Injection Login Bypass - Note : magicquotesgpc =...
MCshoutbox 1.1 (SQL/XSS/Shell) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ============================================================== MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities ============================================================== + MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote...
mcshoutbox 1.1 - SQL Injection / Cross-Site Scripting / shell
MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org Homepage : http://www.maniacomputer.com/dload/MCshoutboxDownloadPage.html + SQL Injection Login Bypass - Note : magicquotesgpc = off - Vulnerable code in...
mcshoutbox 1.1 - SQL Injection Cross-Site Scripting shell
mcshoutbox 1.1 - SQL Injection Cross-Site Scripting shell + MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org Homepage : http://www.maniacomputer.com/dload/MCshoutboxDownloadPage.html + SQL Injection Login Bypass -...