112 matches found
NPDS 4.8 5.0 Glossaire Module - terme SQL Injection
NPDS 4.8 5.0 Glossaire Module - terme SQL Injection source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection...
NPDS 4.8 < 5.0 - 'links.php?Query' SQL Injection
source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may result in the theft of...
[SA15385] NPDS Cross-Site Scripting and SQL Injection Vulnerabilities
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: NPDS Cross-Site Scripting and SQL Injection...
CVE-2005-1637
Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via the thold parameter to 1 comments.php or 2 pollcomments.php...
CVE-2005-1637
Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via the thold parameter to 1 comments.php or 2 pollcomments.php...
CVE-2005-1637
CVE-2005-1637 concerns NPDS versions 4.8 and 5.0, where multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands through the user-controlled thold parameter in the PHP scripts comments.php or pollcomments.php . The underlying issue is improper handling of in...
NPDS 4.85.0 - pollcomments.php?thold SQL Injection
NPDS 4.85.0 - pollcomments.php?thold SQL Injection source: https://www.securityfocus.com/bid/13649/info NPDS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'thold' parameter. Successful exploitation cou...
NPDS 4.8/5.0 - 'comments.php?thold' SQL Injection
source: https://www.securityfocus.com/bid/13649/info NPDS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'thold' parameter. Successful exploitation could result in a compromise of the application,...
NPDS 4.8/5.0 - 'pollcomments.php?thold' SQL Injection
source: https://www.securityfocus.com/bid/13649/info NPDS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'thold' parameter. Successful exploitation could result in a compromise of the application,...
CVE-2002-1804
Cross-site scripting XSS vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...
NPDS 4.8 - News Message HTML Injection
NPDS 4.8 - News Message HTML Injection source: https://www.securityfocus.com/bid/5797/info Problems with NPDS could make it possible to execute arbitrary script code in a vulnerable client. NPDS does not sufficiently filter potentially malicious HTML code from news posts. As a result, when a user...
NPDS 4.8 - News Message HTML Injection
source: https://www.securityfocus.com/bid/5797/info Problems with NPDS could make it possible to execute arbitrary script code in a vulnerable client. NPDS does not sufficiently filter potentially malicious HTML code from news posts. As a result, when a user views a news posting that contains...