Vulnerabilities in Member Management System 2.1

Title: Vulnerabilities in Member Management System 2.1 Software: Member Management System 2.1 Vendor: http://www.expinion.net/software/appmms.asp Impact: Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user and adm...

memmansys21.txt

Title: Vulnerabilities in Member Management System 2.1 Software: Member Management System 2.1 Vendor: http://www.expinion.net/software/appmms.asp Impact: Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user and adm...

CVE-2004-1843

SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to 1 resend.asp or 2 newsview.asp...

Expinion.net Member Management System 2.1 - resend.asp?ID SQL Injection

Expinion.net Member Management System 2.1 - resend.asp?ID SQL Injection source: https://www.securityfocus.com/bid/9931/info It has been reported that Member Management System may be prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into databas...

Expinion.net Member Management System 2.1 - news_view.asp?ID SQL Injection

Expinion.net Member Management System 2.1 - newsview.asp?ID SQL Injection source: https://www.securityfocus.com/bid/9931/info It has been reported that Member Management System may be prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into...

Expinion.net Member Management System 2.1 - 'error.asp?err' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate...

Expinion.net Member Management System 2.1 - register.asp?err Cross-Site Scripting

Expinion.net Member Management System 2.1 - register.asp?err Cross-Site Scripting source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a...

Expinion.net Member Management System 2.1 - 'news_view.asp?ID' SQL Injection

source: https://www.securityfocus.com/bid/9931/info It has been reported that Member Management System may be prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into database queries. The problem is reported to exist in the 'ID' parameter...

Expinion.net Member Management System 2.1 - 'resend.asp?ID' SQL Injection

source: https://www.securityfocus.com/bid/9931/info It has been reported that Member Management System may be prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into database queries. The problem is reported to exist in the 'ID' parameter...

Directory Traversal in Aprox PHP Portal.

Directory Traversal in Aprox PHP Portal. Aprox PHP Portal from www.aprox.de allows to view all files on the system. Exploit URL: http://targethost/index.php?show=/etc/passwd Zero X member of www.lobnan.de and www.lostkey.org...

PHPportal.txt

Directory Traversal in Aprox PHP Portal. Aprox PHP Portal from www.aprox.de allows to view all files on the system. Exploit URL: http://targethost/index.php?show=/etc/passwd Zero X member of www.lobnan.de and www.lostkey.org...

CVE-2003-0483

Cross-site scripting XSS vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via 1 the member parameter to member.php or 2 the action parameter to buddy.php...

postnuke723.txt

Products: Postnuke v 0.723 http://www.postnuke.com Date: 09 March 2003 Author: pokleyzz Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Postnuke v 0.723 SQL injection and directory traversing Description...

SPGpartenaires (PHP)

Informations : °°°°°°°°°°°°°° Version : ? - 3.0.1 Website : http://www.scripts-php-gratuits.com Problem : SQL Injection - Access to member's accounts PHP Code/Location : °°°°°°°°°°°°°°°°°°° modif/ident.php : -------------------------------------------------- ... $sql="SELECT nomsite FROM...

SPGPartenaires 3.0.1 - 'ident.php' SQL Injection

source: https://www.securityfocus.com/bid/6455/info Several vulnerabilities have been discovered in SPGPartenaires. The vulnerabilities are due to insufficient sanitization of the 'pass' and 'SPGP' variables used to construct SQL queries in various PHP scripts. By exploiting these issues it is...

SPGPartenaires 3.0.1 - delete.php SQL Injection

SPGPartenaires 3.0.1 - delete.php SQL Injection source: https://www.securityfocus.com/bid/6455/info Several vulnerabilities have been discovered in SPGPartenaires. The vulnerabilities are due to insufficient sanitization of the 'pass' and 'SPGP' variables used to construct SQL queries in various...

SPGPartenaires 3.0.1 - ident.php SQL Injection

SPGPartenaires 3.0.1 - ident.php SQL Injection source: https://www.securityfocus.com/bid/6455/info Several vulnerabilities have been discovered in SPGPartenaires. The vulnerabilities are due to insufficient sanitization of the 'pass' and 'SPGP' variables used to construct SQL queries in various P...

Microsoft Windows 'Server Operators' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Server Operators' group. Members of this group can perform most common administrative tasks. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10903; scriptversion"1.19"; scriptcvsdate"Dat...

Microsoft Windows 'Backup Operators' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Backup Operators' group. Members of this group can logon to the remote host and perform backup operations read/write files but have no administrative rights. C Tenable Network Security, Inc. include"compat.inc"; if...

Microsoft Windows 'Administrators' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Administrators' group. Members of this group have complete access to the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10902; scriptversion"1.23"; scriptcvsdate"Date:...