EUVD-2006-0507

Malware in sbrugna...

EUVD-2006-0508

Malware in sbrugna...

CVE-2006-0500

MyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient access control, which allows remote attackers to perform unspecified privileged actions by directly accessing files via a URL...

Cross site scripting

Cross-site scripting XSS vulnerability in MyCO Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the Name field, when registering a user...

Improper access control

MyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient access control, which allows remote attackers to perform unspecified privileged actions by directly accessing files via a URL...

CVE-2006-0501

Cross-site scripting XSS vulnerability in MyCO Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the Name field, when registering a user...

CVE-2006-0500

CVE-2006-0500 affects MyCO Guestbook 1.0, where the admin directory is stored under the web document root with insufficient access control. This allows remote attackers to access files directly via a URL and perform unspecified privileged actions. The CVSS data (NVD) indicates a network-accessibl...

CVE-2006-0501

The CVE-2006-0501 entry describes a cross-site scripting (XSS) vulnerability in MyCO Guestbook 1.0, exploitable via the Name field during user registration. The underlying issue is lack of proper input sanitization/escaping in the registration flow, enabling remote attackers to inject arbitrary s...

CVE-2006-0501

Cross-site scripting XSS vulnerability in MyCO Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the Name field, when registering a user...

CVE-2006-0500

MyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient access control, which allows remote attackers to perform unspecified privileged actions by directly accessing files via a URL...

MyCO multiple vulnerabilities

MyCO multiple vulnerabilities Software: MyCO guestbook 1.0 www.punctweb.com Credit: Revnic Vasile [email protected] Description: MyCO is a PHP guestbook that uses a MySQL database Vulnerability: the /admin directory is accessible by everyone. XSS can be injected into the field "Name" when...