EUVD-2006-4881

Malware in sbrugna...

NixieAffiliate 1.9 Lostpassword.PHP Cross-Site Scripting Vulnerability

No description provided by source...

[SA22063] NixieAffiliate Multiple Vulnerabilities

TITLE: NixieAffiliate Multiple Vulnerabilities SECUNIA ADVISORY ID: SA22063 VERIFY ADVISORY: http://secunia.com/advisories/22063/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: NixieAffiliate 1.x...

CVE-2006-4894

Cross-site scripting XSS vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter...

CVE-2006-4894

Cross-site scripting XSS vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter...

CVE-2006-4894

CVE-2006-4894 is an XSS vulnerability in iDevSpot NixieAffiliate (versions 1.9 and earlier), where an attacker can inject arbitrary script via the error parameter in forms/lostpassword.php. The CVE indicates a network-vector, with no authentication required and partial integrity impact. Affected:...

NixieAffiliate all version bypass admin and xss

NixieAffiliate all version vendor : idevspot.com By : s3rv3rhack3r www: hackerz.ir & h4ckerz.com Bypass for delete any aff ID : www.domain.com/NixieAffiliate/delete.php?id=1 Xss : www.domain.com/NixieAffiliate/forms/lostpassword.php?error=xss...

NixieAffiliate 1.9 - lostpassword.php Cross-Site Scripting

NixieAffiliate 1.9 - lostpassword.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20084/info NixieAffiliate is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to have arbitrary script co...

NixieAffiliate 1.9 - 'lostpassword.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20084/info NixieAffiliate is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to have arbitrary script code execute in the browser of an unsuspecting user in the...