EUVD-2012-3787

Malware in sbrugna...

EUVD-2012-3786

Malware in sbrugna...

MyClientBase 0.12 - Multiple Vulnerabilities

No description provided by source. Title: ====== MyClientBase v0.12 - Multiple Web Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=511 VL-ID: ===== 511 Introduction: ============= MyClientBase is a simple, intuitive, free and open...

CVE-2012-3839

Multiple SQL injection vulnerabilities in application/core/MYModel.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the 1 invoicenumber or 2 tags parameter to index.php/invoicesearch...

CVE-2012-3840

Multiple cross-site scripting XSS vulnerabilities in index.php/users/form/userid in MyClientBase 0.12 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname or 2 lastname parameters...

Sql injection

Multiple SQL injection vulnerabilities in application/core/MYModel.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the 1 invoicenumber or 2 tags parameter to index.php/invoicesearch...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php/users/form/userid in MyClientBase 0.12 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname or 2 lastname parameters...

CVE-2012-3840

Multiple cross-site scripting XSS vulnerabilities in index.php/users/form/userid in MyClientBase 0.12 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname or 2 lastname parameters...

CVE-2012-3840

CVE-2012-3840 documents multiple XSS vulnerabilities in MyClientBase 0.12, exploitable via index.php/users/form/user_id using the first_name or last_name parameters. The affected component is the user form handling; the root cause is input handling allowing script/HTML injection. Reported across ...

CVE-2012-3839

Multiple SQL injection vulnerabilities in application/core/MYModel.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the 1 invoicenumber or 2 tags parameter to index.php/invoicesearch...

CVE-2012-3839

CVE-2012-3839 involves multiple SQL injection vulnerabilities in the MyClientBase 0.12 package, specifically in the file application/core/MY_Model.php and exploitable via the invoice_search endpoint (invoice_number or tags parameters). The issue allows remote attackers to execute arbitrary SQL co...

CVE-2012-3840: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php/users/form/userid in MyClientBase 0.12 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname or 2 lastname parameters...

PT-2012-5035

Name of the Vulnerable Software and Affected Versions MyClientBase version 0.12 Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via the invoice number or tags parameter to the "index.php/invoice searc...

PT-2012-5036

Name of the Vulnerable Software and Affected Versions MyClientBase version 0.12 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the first name or last name parameters in the...

CVE-2012-3839: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in application/core/MYModel.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the 1 invoicenumber or 2 tags parameter to index.php/invoicesearch...

MyClientBase CSRF Vulnerability (Add Admin)

Exploit for php platform in category web applications MyClientBase CSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script :...

MyClientBase 0.12 SQL Injection

Title: ====== MyClientBase v0.12 - Multiple Web Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=511 VL-ID: ===== 511 Introduction: ============= MyClientBase is a simple, intuitive, free and open source web based invoice management...

MyClientBase 0.12 - Multiple Vulnerabilities

MyClientBase 0.12 - Multiple Vulnerabilities Title: ====== MyClientBase v0.12 - Multiple Web Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=511 VL-ID: ===== 511 Introduction: ============= MyClientBase is a simple, intuitive, free...

MyClientBase v0.12 - Multiple Web Vulnerabilities

Document Title: =============== MyClientBase v0.12 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=511 Release Date: ============= 2012-04-29 Vulnerability Laboratory ID VL-ID: ==================================== 511 Commo...

MyClientBase v0.12 - Multiple Web Vulnerabilities

Document Title: =============== MyClientBase v0.12 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=511 Release Date: ============= 2012-04-29 Vulnerability Laboratory ID VL-ID: ==================================== 511 Commo...