MySource 2.14 insert_table.php bgcolor Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

MySource 2.14 mime.php PEAR_PATH Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these...

MySource 2.14 Socket.php PEAR_PATH Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these...

CVE-2010-4901

Multiple cross-site scripting XSS vulnerabilities in charmap.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the 1 height or 2 width parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in charmap.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the 1 height or 2 width parameter...

CVE-2010-4901

The CVE-2010-4901 issue affects MySource Matrix 3.28.3 (Squiz) where the height (and width) parameter passed to char_map.php is not properly sanitized, enabling remote XSS. Public details describe a remote reflected XSS via these parameters, with vulnerable version 3.28.3 and vendor remediation s...

CVE-2010-4901

Multiple cross-site scripting XSS vulnerabilities in charmap.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the 1 height or 2 width parameter...

CVE-2010-4639

SQL injection vulnerability in index.php in MySource Matrix allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in MySource Matrix allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4639

SQL injection vulnerability in index.php in MySource Matrix allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4639

CVE-2010-4639 corresponds to a SQL injection vulnerability in the MySource Matrix product, specifically in index.php where the id parameter can be manipulated to execute arbitrary SQL commands remotely. The entry has a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low complexity, a...

MySource Matrix CMS SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== MySource Matrix CMS SQL Injection Vulnerability =============================================== + Exploit Title: MySource Matrix SQL Injection Vulnerability + Date: 2010-11-02 + Author : Cru3l.b0...

MySource Matrix 3.28.3 (height) Remote Reflected XSS Vulnerability

Summary MySource Matrix is a powerful Open Source Content Management System CMS written in PHP and is suitable for many types of organisations. Description Input passed via the "height" parameter to charmap.php is not properly sanitised before being returned to the user. This can be exploited to...

MySource Matrix - 'char_map.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43020/info MySource Matrix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

MySource Matrix - char_map.php Multiple Cross-Site Scripting Vulnerabilities

MySource Matrix - charmap.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/43020/info MySource Matrix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issu...

CVE-2006-5672

PHP remote file inclusion vulnerability in web/initmysource.php in MySource CMS 2.16.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter...

CVE-2006-5672

PHP remote file inclusion vulnerability in web/initmysource.php in MySource CMS 2.16.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter...

CVE-2006-5672

The CVE-2006-5672 entry describes a PHP remote file inclusion vulnerability in the MySource CMS up to version 2.16.2. The flaw arises in web/init_mysource.php, where an attacker can supply a URL via the INCLUDE_PATH parameter to cause arbitrary PHP code execution. This is documented in the NVD en...

MySource CMS <= 2.16.2 (init_mysource.php) Remote File Include Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' | \\ | \\ | \ . . |\ \ \ /\ \ / /| || | | | | \ | \ Y / | || | | \ | \ \ / | || | |/ // / / ||| \ | / / \ / \ |\ /\ / / \ / \ | | | | / /\ \ / \ / \ | | | | / | / Y \ || / /| /| /...

MySource CMS <= 2.16.2 (init_mysource.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ====================================================================== MySource CMS | | \\ | | | | | | \ //----------------------- | DEVIL TEAM - POLISH TEAM \/ http://www.rahim.webd.pl/ . .\ . \ / | | ||/ | || / \ | \ / /\ | | / | ...