EUVD-2007-4128

Malware in sbrugna...

EUVD-2006-0841

Malware in sbrugna...

CVE-2007-4144

Cross-site scripting XSS vulnerability in sample-forms/simple-contact-form-with-preview/simple-contact-form-with-preview.html in MitriDAT eMail Form Processor Pro allows remote attackers to inject arbitrary web script or HTML via the basepath parameter, possibly related to 1 formprocessorpro.php ...

Cross site scripting

Cross-site scripting XSS vulnerability in sample-forms/simple-contact-form-with-preview/simple-contact-form-with-preview.html in MitriDAT eMail Form Processor Pro allows remote attackers to inject arbitrary web script or HTML via the basepath parameter, possibly related to 1 formprocessorpro.php ...

CVE-2007-4144

Cross-site scripting XSS vulnerability in sample-forms/simple-contact-form-with-preview/simple-contact-form-with-preview.html in MitriDAT eMail Form Processor Pro allows remote attackers to inject arbitrary web script or HTML via the basepath parameter, possibly related to 1 formprocessorpro.php ...

CVE-2007-4144

CVE-2007-4144 affects MitriDAT eMail Form Processor Pro, specifically the sample-forms/simple-contact-form-with-preview.html page. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML through the base_path parameter, with possi...

Mitridat Form Processor Pro XSS

Greetings, I have discovered cross-site scripting vulnerability in Mitridat's Form Processor Pro. http://www.mitridat.com/ http://www.mitridat.com/products-form-processor-pro.html Form Mail: Email Form Processor Pro™ - process all forms on your website Form Mail: Email Form Processor Pro is the...

Sql injection

SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service inaccessible database via the tabls parameter...

CVE-2006-0835

SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service inaccessible database via the tabls parameter...

CVE-2006-0835

CVE-2006-0835 describes an SQL injection in MitriDAT Web Calendar Pro, specifically in dropbase.php, exploitable via the tabls parameter. The flaw allows remote attackers to modify internal SQL queries and trigger a denial of service (inaccessible database). Affected product: MitriDAT Web Calenda...

CVE-2006-0835

SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service inaccessible database via the tabls parameter...

XOR-wcp.txt

------=Part353323175882.1140054719148 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=...

[Full-disclosure] Web Calendar Pro - Denial of Service SQL Injection Vulnerability

======================================================================================= XOR Crew :: Security Advisory 1/12/2006 ======================================================================================= Web Calendar Pro - Denial of Service SQL injection lame...