10 matches found
EUVD-2006-6748
Malware in sbrugna...
Pagetool 1.07 - search_term Cross-Site Scripting
Pagetool 1.07 - searchterm Cross-Site Scripting source: https://www.securityfocus.com/bid/27653/info Pagetool is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
Pagetool 1.07 - 'search_term' Cross-Site Scripting
source: https://www.securityfocus.com/bid/27653/info Pagetool is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...
Sql injection
SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a pagetoolnews action...
CVE-2007-3402
SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a pagetoolnews action...
CVE-2007-3402
SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a pagetoolnews action...
Pagetool 1.07 (news_id) Remote SQL Injection Vulnerability
No description provided by source. pagetool-1.07 Remote SQL Injection download:http://kent.dl.sourceforge.net/sourceforge/pagetool/pagetool-1.07.tar.gz Found by: Katatafish [email protected] Dork: "powered by Pagetool" Thanks: str0ke PoC...
pagetool-sql.txt
pagetool-1.07 Remote SQL Injection download:http://kent.dl.sourceforge.net/sourceforge/pagetool/pagetool-1.07.tar.gz Found by: Katatafish [email protected] Dork: "powered by Pagetool" Thanks: str0ke PoC...
CVE-2006-6765
Multiple PHP file inclusion vulnerabilities in src/admin/ptupload.php in Pagetool 1.07 allow remote attackers to execute arbitrary PHP code via 1 a local filename or FTP/share URI in the configfile parameter or 2 a URL in the ptconfsrc parameter...
CVE-2006-6765
The CVE-2006-6765 entry describes multiple PHP file inclusion vulnerabilities in Pagetool 1.07, specifically in src/admin/pt_upload.php. The underlying issues allow remote attackers to execute arbitrary PHP code by supplying (1) a local filename or FTP/share URI via config_file, or (2) a URL via ...