100 matches found
CVE-2006-4635: Undefined Security Weakness
Unspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote authenticated users, with superuser privileges, to inject arbitrary PHP code via unspecified vectors related to the Equation attribute in WebExtensions - Notitia I/II. NOTE: due to lack of details, it is not...
[SA21757] MySource Classic Equation Attribute PHP Code Injection
TITLE: MySource Classic Equation Attribute PHP Code Injection SECUNIA ADVISORY ID: SA21757 VERIFY ADVISORY: http://secunia.com/advisories/21757/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: MySource Classic 2.x http://secunia.com/product/5773/ DESCRIPTION: A...
CVE-2005-3520
Multiple cross-site scripting XSS vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via 1 the targeturl parameter in upgradeinprogressbackend.php, 2 the stylesheet parameter in edittablecelltypewysiwyg.php, and the bgcolor parameter in 3...
CVE-2005-3519
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the 1 INCLUDEPATH and 2 SQUIZLIBPATH parameters in newupgradefunctions.php, 3 the INCLUDEPATH parameter in initmysource.php, and the PEARPATH...
CVE-2005-3520
CVE-2005-3520 affects MySource 2.14.0 with multiple XSS weaknesses. The vulnerability is triggered via several parameters across PHP/HTML files: target_url (upgrade_in_progress_backend.php), stylesheet (edit_table_cell_type_wysiwyg.php), and bgcolor (insert_table.php, edit_table_cell_props.php, h...
CVE-2005-3519
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the 1 INCLUDEPATH and 2 SQUIZLIBPATH parameters in newupgradefunctions.php, 3 the INCLUDEPATH parameter in initmysource.php, and the PEARPATH...
CVE-2005-3520
Multiple cross-site scripting XSS vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via 1 the targeturl parameter in upgradeinprogressbackend.php, 2 the stylesheet parameter in edittablecelltypewysiwyg.php, and the bgcolor parameter in 3...
CVE-2005-3519
Multiple PHP file inclusion vulnerabilities affect MySource 2.14.0. The flaws allow remote attackers to execute arbitrary PHP code and include arbitrary local files through include path parameters in new_upgrade_functions.php, init_mysource.php, and various files using INCLUDE_PATH, SQUIZLIB_PATH...
CVE-2005-3520: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via 1 the targeturl parameter in upgradeinprogressbackend.php, 2 the stylesheet parameter in edittablecelltypewysiwyg.php, and the bgcolor parameter in 3...
CVE-2005-3519: Undefined Security Weakness
Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the 1 INCLUDEPATH and 2 SQUIZLIBPATH parameters in newupgradefunctions.php, 3 the INCLUDEPATH parameter in initmysource.php, and the PEARPATH...
Secunia Research: MySource Cross-Site Scripting and File Inclusion Vulnerabilities
====================================================================== Secunia Research 18/10/2005 - MySource Cross-Site Scripting and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...
MySource 2.14 - new_upgrade_functions.php Multiple Remote File Inclusions
MySource 2.14 - newupgradefunctions.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ...
MySource 2.14 - edit_table_cell_type_wysiwyg.php?Stylesheet Cross-Site Scripting
MySource 2.14 - edittablecelltypewysiwyg.php?Stylesheet Cross-Site Scripting source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...
MySource 2.14 - edit_table_cell_props.php?bgcolor Cross-Site Scripting
MySource 2.14 - edittablecellprops.php?bgcolor Cross-Site Scripting source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker m...
MySource 2.14 - upgrade_in_progress_backend.php?target_url Cross-Site Scripting
MySource 2.14 - upgradeinprogressbackend.php?targeturl Cross-Site Scripting source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...
MySource 2.14 - mime.php?PEAR_PATH Remote File Inclusion
MySource 2.14 - mime.php?PEARPATH Remote File Inclusion source: https://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...
MySource 2.14 - 'Date.php?PEAR_PATH' Remote File Inclusion
source: https://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary...
MySource 2.14 - 'edit_table_cell_props.php?bgcolor' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...
MySource 2.14 - 'edit_table_cell_type_wysiwyg.php?Stylesheet' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...
MySource 2.14 - 'edit_table_props.php?bgcolor' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...