EUVD-2006-6504

Malware in sbrugna...

EUVD-2006-6503

Malware in sbrugna...

Messageriescripthp 2.0 Contact/contact.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

Messageriescripthp 2.0 lire-avis.php aa Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...

CVE-2006-6520

Multiple cross-site scripting XSS vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 pseudo parameter to a existepseudo.php, the 2 email parameter to b existeemail.php, or the 3 pageName or 4 cssform parameter to c Contact/contact.php...

CVE-2006-6521

SQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote attackers to execute arbitrary SQL commands via the aa parameter...

CVE-2006-6520

Multiple cross-site scripting XSS vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 pseudo parameter to a existepseudo.php, the 2 email parameter to b existeemail.php, or the 3 pageName or 4 cssform parameter to c Contact/contact.php...

CVE-2006-6520

The CVE-2006-6520 entry describes multiple XSS vulnerabilities in Messageriescripthp 2.0, allowing remote attackers to inject arbitrary script/HTML via parameters: pseudo to existepseudo.php, email to existeemail.php, and pageName or cssform to Contact/contact.php. NVD reports a CVSS v2 base scor...

CVE-2006-6521

CVE-2006-6521 is a SQL injection vulnerability affecting lire-avis.php in Messageriescripthp 2.0. The underlying issue allows remote attackers to inject and execute arbitrary SQL commands via the aa parameter. Documented impact aligns with partial confidentiality, integrity, and availability conc...

m20xsssql.txt

Messageriescripthp V2.0 ----------------------- Vendor site: http://www.scripthp.com/ Product: Messageriescripthp V2.0 Vulnerability: XSS & SQL Injection Vulnerability Credits: MrKaLiMaN Reported to Vendor: 01/12/06 Public disclosure: 09/12/06 Description: ------------ SQL Injection Vulnerability...

[SA23319] Messageriescripthp SQL Injection and Cross-Site Scripting

TITLE: Messageriescripthp SQL Injection and Cross-Site Scripting SECUNIA ADVISORY ID: SA23319 VERIFY ADVISORY: http://secunia.com/advisories/23319/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Messageriescripthp 2.x...

Messageriescripthp V2.0 XSS & SQL Injection

Messageriescripthp V2.0 ----------------------- Vendor site: http://www.scripthp.com/ Product: Messageriescripthp V2.0 Vulnerability: XSS & SQL Injection Vulnerability Credits: MrKaLiMaN Reported to Vendor: 01/12/06 Public disclosure: 09/12/06 Description: ------------ SQL Injection Vulnerability...

Messageriescripthp 2.0 - '/Contact/contact.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Messageriescripthp 2.0 - Contactcontact.php Multiple Cross-Site Scripting Vulnerabilities

Messageriescripthp 2.0 - Contactcontact.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to...

Messageriescripthp 2.0 - 'existepseudo.php?pseudo' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...