CVE-2006-4376

Multiple cross-site scripting XSS vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the 1 profilnr and 2 sprache parameters in the main portion of the portal, the 3 suchstring...

CVE-2006-4377

Multiple SQL injection vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the 1 profilnr and 2 sprache parameters in the main portion of the portal, the 3 suchstring field in suchFo...

CVE-2006-4376

Multiple cross-site scripting XSS vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the 1 profilnr and 2 sprache parameters in the main portion of the portal, the 3 suchstring...

CVE-2006-4376

CVE-2006-4376 involves multiple XSS vulnerabilities in the Guder und Koch Netzwerktechnik Eichhorn Portal. Remote attackers can inject arbitrary web script or HTML via unspecified vectors, potentially using parameters such as profil_nr, sprache, suchstring (in suchForm), GaleryKey and Breadcrumbs...

CVE-2006-4377

CVE-2006-4377 describes multiple SQL injection vulnerabilities in the Guder und Koch Netzwerktechnik Eichhorn Portal. The flaws permit remote attackers to execute arbitrary SQL commands through unspecified vectors, potentially including parameters such as profil_nr, sprache, suchstring, GaleryKey...

CVE-2006-4377

Multiple SQL injection vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the 1 profilnr and 2 sprache parameters in the main portion of the portal, the 3 suchstring field in suchFo...

Tons of SQL-injections and XSS in Eichhorn Portal and vendor page

Hi list. There are lots of SQL injections and XSS in the 'Eichhorn Portal' by 'Guder und Koch Netzwerktechnik' and their own website. Input passed to multiple parameters in different PHP-files isn't properly sanitised before being returned to the user. This can be exploited to execute arbitrary...