EUVD-2006-4516

Malware in sbrugna...

EUVD-2006-4517

Malware in sbrugna...

EUVD-2006-4518

Malware in sbrugna...

membrepass15.txt

================================================================= Affected.scr..: Membrepass v1.5 Advisory.ID...: 09290806 Type..........: Cross Site Scripting, SQL Injection Php code execution Risk.level....: Medium Vendor.Status.: Unpatched Src.download..:...

CVE-2006-4528

Multiple cross-site scripting XSS vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 recherche parameter in recherchemembre.php and the 2 email parameter in test.php...

CVE-2006-4529

SQL injection vulnerability in recherchemembre.php in membrepass 1.5. allows remote attackers to execute arbitrary SQL commands via the recherche parameter...

CVE-2006-4529

SQL injection vulnerability in recherchemembre.php in membrepass 1.5. allows remote attackers to execute arbitrary SQL commands via the recherche parameter...

CVE-2006-4530

Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code via the aifon parameter, which is injected into include/variable.php...

CVE-2006-4529

CVE-2006-4529 describes an SQL injection vulnerability in the PHP page recherchemembre.php of membrepass 1.5. The flaw allows remote attackers to append or modify SQL commands through the recherche parameter, enabling possible unauthorized data access or modification. The available sources identi...

CVE-2006-4528

Multiple cross-site scripting (XSS) vulnerabilities affect membrepass 1.5, allowing remote attackers to inject arbitrary script or HTML via the (1) recherche parameter in recherchermembre.php and the (2) email parameter in test.php. The NVD entry confirms these XSS flaws and lists CVE-2006-4528 a...

CVE-2006-4530

CVE-2006-4530 describes a direct static code injection vulnerability in the PHP-based product membrepass 1.5. The flaw occurs in include/change.php where the parameter aifon is injected into include/variable.php , enabling an attacker to execute arbitrary PHP code. The canonical affected componen...

Membrepass v1.5 Php code execution, Xss, Sql Injection

================================================================= Affected.scr..: Membrepass v1.5 Advisory.ID...: 09290806 Type..........: Cross Site Scripting, SQL Injection Php code execution Risk.level....: Medium Vendor.Status.: Unpatched Src.download..:...