EUVD-2006-4491

Malware in sbrugna...

EUVD-2006-4492

Malware in sbrugna...

EUVD-2006-4493

Malware in sbrugna...

CVE-2006-4505

CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a CRLF sequence in the url parameter...

CVE-2006-4503

Directory traversal vulnerability in link.php in NX5Linx 1.0 allows remote attackers to read arbitrary files via the logo parameter...

CVE-2006-4504

SQL injection vulnerability in NX5Linx 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 c and 2 l parameters...

CVE-2006-4505

NX5Linx 1.0 is affected by CVE-2006-4505: a CRLF injection in links.php allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via the url parameter. The connected sources also describe broader NX5Linkx issues (e.g., link.php exposure and additional vulnerabi...

CVE-2006-4503

NX5Linx/NX5Linkx 1.0 is affected by CVE-2006-4503 due to a directory traversal in link.php where the logo parameter is not sanitized, allowing an attacker to read arbitrary files on the server. The vulnerability is confirmed in publicly shared advisories for NX5Linkx (eVuln EV0138) which lists NX...

CVE-2006-4505

CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a CRLF sequence in the url parameter...

CVE-2006-4504

NX5Linx 1.0 is affected by an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL via the c and l parameters. The issue is documented with PoC/exploit availability (EV0138) and various advisories, and the vulnerability appears in multiple sources. No patch/remediatio...

CVE-2006-4504

SQL injection vulnerability in NX5Linx 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 c and 2 l parameters...