EUVD-2007-0251

Malware in sbrugna...

EUVD-2007-0252

Malware in sbrugna...

Sql injection

index.php in Nwom topsites 3.0 allows remote attackers to obtain potentially sensitive information via a ' quote character in the o parameter, which forces a SQL error...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Nwom topsites 3.0 allows remote attackers to inject arbitrary web script or HTML via the o parameter...

CVE-2007-0250

index.php in Nwom topsites 3.0 allows remote attackers to obtain potentially sensitive information via a ' quote character in the o parameter, which forces a SQL error...

CVE-2007-0249

Cross-site scripting XSS vulnerability in index.php in Nwom topsites 3.0 allows remote attackers to inject arbitrary web script or HTML via the o parameter...

CVE-2007-0250

index.php in Nwom topsites 3.0 allows remote attackers to obtain potentially sensitive information via a ' quote character in the o parameter, which forces a SQL error...

CVE-2007-0249

The CVE-2007-0249 entry concerns a cross-site scripting (XSS) vulnerability in the Nwom topsites 3.0 web application, specifically in index.php where an attacker can inject arbitrary script via the o parameter. The vulnerability is described across multiple sources (NVD, CVE listings) with a NVD ...

CVE-2007-0250

CVE-2007-0250 affects Nwom topsites 3.0. The vulnerability is in index.php where a single quote in the o parameter can trigger a SQL error, potentially exposing sensitive information. Concrete impact is information disclosure (partial confidentiality). No remediation or patch details are provided...

CVE-2007-0249

Cross-site scripting XSS vulnerability in index.php in Nwom topsites 3.0 allows remote attackers to inject arbitrary web script or HTML via the o parameter...

nwomtopsites30-sql.txt

Nwom topsites v3.0 http://www.nwom.net Vulnerable files: Comment input. index.php SQL info released on error: http://www.example.com/index.php?o=' XSS: http://www.example.com/index.php?o= - Luny...

Nwom topsites v3.0

Nwom topsites v3.0 http://www.nwom.net Vulnerable files: Comment input. index.php SQL info released on error: http://www.example.com/index.php?o=' XSS: http://www.example.com/index.php?o=IMG20SRC=javascript:alertString.fromCharCode88,83,83 - Luny...