EUVD-2006-1293

Malware in sbrugna...

EUVD-2006-1294

Malware in sbrugna...

CVE-2006-1289

Multiple SQL injection vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username, 2 password, 3 team, 4 level, 5 status, 6 teamname, and 7 teamlead parameters in a auth.php; the 8 username, 9 action, and 10 filter...

Sql injection

Multiple SQL injection vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username, 2 password, 3 team, 4 level, 5 status, 6 teamname, and 7 teamlead parameters in a auth.php; the 8 username, 9 action, and 10 filter...

CVE-2006-1289

Multiple SQL injection vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username, 2 password, 3 team, 4 level, 5 status, 6 teamname, and 7 teamlead parameters in a auth.php; the 8 username, 9 action, and 10 filter...

CVE-2006-1290

Multiple cross-site scripting XSS vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 ipAddress, 2 act, 3 username, and 4 unspecified other parameters in a authuser.php; and the 5 username and 6 unspecified other...

CVE-2006-1289

Milkeyway Captive Portal 0.1 and 0.1.1 have multiple SQL injection flaws that let remote attackers execute arbitrary SQL via parameters across several PHP scripts (auth.php, authuser.php, utils.php, traffic.php, userstatistics.php, chgpwd.php) and even via a cookie. Affected inputs include userna...

CVE-2006-1290

CVE-2006-1290 involves Milkeyway Captive Portal versions 0.1 and 0.1.1, with multiple reflected XSS vulnerabilities in authuser.php (parameters ipAddress, act, username, and others) and in userstatistics.php (username, and others). The affected component is the web application logic handling user...

Milkeyway Multiple Vulnerabilities

Milkeyway Captive Portal Multiple Vulnerabilities Name Multiple Vulnerabilities in Milkeyway Captive Portal Systems Affected WebCalendar any version, verified on 0.1 and 0.1.1 Severity Medium Risk Vendor sourceforge.net/projects/milkeyway Advisory...