EUVD-2012-3786

Malware in sbrugna...

EUVD-2012-3787

Malware in sbrugna...

MyClientBase 0.12 - Multiple Vulnerabilities

No description provided by source. Title: ====== MyClientBase v0.12 - Multiple Web Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=511 VL-ID: ===== 511 Introduction: ============= MyClientBase is a simple, intuitive, free and open...

CVE-2012-3839

Multiple SQL injection vulnerabilities in application/core/MYModel.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the 1 invoicenumber or 2 tags parameter to index.php/invoicesearch...

CVE-2012-3840

Multiple cross-site scripting XSS vulnerabilities in index.php/users/form/userid in MyClientBase 0.12 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname or 2 lastname parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php/users/form/userid in MyClientBase 0.12 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname or 2 lastname parameters...

Sql injection

Multiple SQL injection vulnerabilities in application/core/MYModel.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the 1 invoicenumber or 2 tags parameter to index.php/invoicesearch...

CVE-2012-3839

CVE-2012-3839 involves multiple SQL injection vulnerabilities in the MyClientBase 0.12 package, specifically in the file application/core/MY_Model.php and exploitable via the invoice_search endpoint (invoice_number or tags parameters). The issue allows remote attackers to execute arbitrary SQL co...

CVE-2012-3840

Multiple cross-site scripting XSS vulnerabilities in index.php/users/form/userid in MyClientBase 0.12 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname or 2 lastname parameters...

CVE-2012-3839

Multiple SQL injection vulnerabilities in application/core/MYModel.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the 1 invoicenumber or 2 tags parameter to index.php/invoicesearch...

CVE-2012-3840

CVE-2012-3840 documents multiple XSS vulnerabilities in MyClientBase 0.12, exploitable via index.php/users/form/user_id using the first_name or last_name parameters. The affected component is the user form handling; the root cause is input handling allowing script/HTML injection. Reported across ...

MyClientBase CSRF Vulnerability (Add Admin)

Exploit for php platform in category web applications MyClientBase CSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script :...

MyClientBase 0.12 SQL Injection

Title: ====== MyClientBase v0.12 - Multiple Web Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=511 VL-ID: ===== 511 Introduction: ============= MyClientBase is a simple, intuitive, free and open source web based invoice management...

MyClientBase 0.12 - Multiple Vulnerabilities

MyClientBase 0.12 - Multiple Vulnerabilities Title: ====== MyClientBase v0.12 - Multiple Web Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=511 VL-ID: ===== 511 Introduction: ============= MyClientBase is a simple, intuitive, free...

MyClientBase v0.12 - Multiple Web Vulnerabilities

Document Title: =============== MyClientBase v0.12 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=511 Release Date: ============= 2012-04-29 Vulnerability Laboratory ID VL-ID: ==================================== 511 Commo...

MyClientBase v0.12 - Multiple Web Vulnerabilities

Document Title: =============== MyClientBase v0.12 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=511 Release Date: ============= 2012-04-29 Vulnerability Laboratory ID VL-ID: ==================================== 511 Commo...