1680 matches found
CVE-2006-5564
Cross-site scripting XSS vulnerability in user.php in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary web script or HTML via the op parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-5565
CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRLF sequence in the 1 name, 2 file, 3 module, and 4 func parameters in a index.php; and the 5 file parameter in b modules.php. NOTE: the provenance of this information is unknown;...
CVE-2006-5565
CVE-2006-5565 concerns a CRLF injection vulnerability in MAXdev MD-Pro 1.0.76. The flaw allows remote attackers to inject arbitrary HTTP headers by inserting a CRLF sequence into parameters (name, file, module, func) in index.php and the file parameter in modules.php. The accompanying data notes ...
CVE-2006-5564
Cross-site scripting XSS vulnerability in user.php in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary web script or HTML via the op parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-5564
CVE-2006-5564 is an XSS vulnerability in MAXdev MD-Pro 1.0.76, exploitable via the op parameter in user.php. The issue allows remote attackers to inject arbitrary web script/HTML. The NVD record lists a base score of 4.3 (Medium) with Network attack vector, no confidentiality impact, partial inte...
CVE-2006-5565
CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRLF sequence in the 1 name, 2 file, 3 module, and 4 func parameters in a index.php; and the 5 file parameter in b modules.php. NOTE: the provenance of this information is unknown;...
CVE-2006-5565: Undefined Security Weakness
CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRLF sequence in the 1 name, 2 file, 3 module, and 4 func parameters in a index.php; and the 5 file parameter in b modules.php. NOTE: the provenance of this information is unknown;...
CVE-2006-5564: Undefined Security Weakness
Cross-site scripting XSS vulnerability in user.php in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary web script or HTML via the op parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
MAXdev MD-Pro 1.0.76 - 'user.php' Cross-Site Scripting
MAXdev MD-Pro is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacke...
MAXdev MD-Pro 1.0.76 - user.php Cross-Site Scripting
MAXdev MD-Pro 1.0.76 - user.php Cross-Site Scripting MAXdev MD-Pro is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the...
[SA22050] MAXdev MD-Pro Cross-Site Scripting Vulnerability
TITLE: MAXdev MD-Pro Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA22050 VERIFY ADVISORY: http://secunia.com/advisories/22050/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: MAXdev MD-Pro 1.x http://secunia.com/product/5663/ DESCRIPTION: A...
MDNews.txt
SaVSaK.CoM | SpC-x - The-BeKiR | MD News 1 Version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : MD News Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx Code : $configfile = "config.php"; require $configfile; Vulnerable : http://www.victim.com/MD...
MD News 1 Version - Remote File Include Vulnerabilities
SaVSaK.CoM | SpC-x - The-BeKiR | MD News 1 Version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : MD News Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx Code : $configfile = "config.php"; require $configfile; Vulnerable : http://www.victim.com/MD...
[eVuln] MD News Authentication Bypass and SQL Injection Vulnerabilities
New eVuln Advisory: MD News Authentication Bypass and SQL Injection Vulnerabilities http://evuln.com/vulns/120/summary.html --------------------Summary---------------- eVuln ID: EV0120 Software: MD News Sowtware's Web Site: http://www.matthewdingley.co.uk/ Versions: 1 Critical Level: Moderate Typ...
Authentication flaw
MD News 1 allows remote attackers to bypass authentication via a direct request to a script in the Administration Area...
CVE-2006-1755
SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-1756
MD News 1 allows remote attackers to bypass authentication via a direct request to a script in the Administration Area...
Sql injection
SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-1755
MD News 1 admin.php is affected by an SQL injection in the id parameter that allows remote attackers to run arbitrary SQL. Root cause: improper handling of input leading to SQL injection. Impact: potential unauthorized data exposure or modification; exploitation is remote over the network with lo...