9 matches found
EUVD-2006-4881
Malware in sbrugna...
NixieAffiliate 1.9 Lostpassword.PHP Cross-Site Scripting Vulnerability
No description provided by source...
[SA22063] NixieAffiliate Multiple Vulnerabilities
TITLE: NixieAffiliate Multiple Vulnerabilities SECUNIA ADVISORY ID: SA22063 VERIFY ADVISORY: http://secunia.com/advisories/22063/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: NixieAffiliate 1.x...
CVE-2006-4894
Cross-site scripting XSS vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter...
CVE-2006-4894
Cross-site scripting XSS vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter...
CVE-2006-4894
CVE-2006-4894 is an XSS vulnerability in iDevSpot NixieAffiliate (versions 1.9 and earlier), where an attacker can inject arbitrary script via the error parameter in forms/lostpassword.php. The CVE indicates a network-vector, with no authentication required and partial integrity impact. Affected:...
NixieAffiliate all version bypass admin and xss
NixieAffiliate all version vendor : idevspot.com By : s3rv3rhack3r www: hackerz.ir & h4ckerz.com Bypass for delete any aff ID : www.domain.com/NixieAffiliate/delete.php?id=1 Xss : www.domain.com/NixieAffiliate/forms/lostpassword.php?error=xss...
NixieAffiliate 1.9 - 'lostpassword.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20084/info NixieAffiliate is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to have arbitrary script code execute in the browser of an unsuspecting user in the...
NixieAffiliate 1.9 - lostpassword.php Cross-Site Scripting
NixieAffiliate 1.9 - lostpassword.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20084/info NixieAffiliate is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to have arbitrary script co...