CVE-2006-0569

Papoo 2.1.4 and earlier contain a Cross-site scripting (XSS) vulnerability in user_class.php that allows remote attackers to inject arbitrary web script or HTML via the username field during new account registration. The flaw is documented across multiple sources (NVD, CVE list, and related recor...

[SA18721] Papoo Username Script Insertion Vulnerability

TITLE: Papoo Username Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18721 VERIFY ADVISORY: http://secunia.com/advisories/18721/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Papoo 2.x http://secunia.com/product/6588/ DESCRIPTION: Thomas Pollet has...

CVE-2005-4478

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 menuid parameter to a index.php and b guestbook.php, and the 2 forumid and 3 reporeidprint parameters to c print.php...

CVE-2005-4478

The CVE-2005-4478 entries (and related records) document multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier. An attacker can remotely execute arbitrary SQL commands via: (1) menuid parameter to index.php and guestbook.php; and (2) forumid and (3) reporeid_print parameters to print....

CVE-2005-4478

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 menuid parameter to a index.php and b guestbook.php, and the 2 forumid and 3 reporeidprint parameters to c print.php...

Papoo 2.1.2 - Guestbook.php?menuid SQL Injection

Papoo 2.1.2 - Guestbook.php?menuid SQL Injection source: https://www.securityfocus.com/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

Papoo Multiple SQL vuln.

Papoo Multiple SQL vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/papoo-multiple-sql-vuln.html vendor:http://www.papoo.org/ affected version:2.1.2 and prior Product Description: Papoo ist an easy to use, accessible CMS. It respects for...

Papoo 2.1.2 - 'index.php?menuid' SQL Injection

source: https://www.securityfocus.com/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could allow an attacker to compromis...

Papoo 2.1.2 - index.php?menuid SQL Injection

Papoo 2.1.2 - index.php?menuid SQL Injection source: https://www.securityfocus.com/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

Papoo 2.1.2 - print.php Multiple SQL Injections

Papoo 2.1.2 - print.php Multiple SQL Injections source: https://www.securityfocus.com/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

Papoo 2.1.2 - 'Guestbook.php?menuid' SQL Injection

source: https://www.securityfocus.com/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could allow an attacker to compromis...

Papoo 2.1.2 - 'print.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could allow an attacker to compromis...