PHProfession 2.5 - 'modules.php?offset' SQL Injection

source: https://www.securityfocus.com/bid/10190/info Multiple vulnerabilities were reported to exist in phProfession, which is a third-party module for PostNuke. Path disclosure, cross-site scripting and SQL injection vulnerabilities were reported. Exploitation of these issues may reveal sensitiv...

PHProfession 2.5 - 'upload.php' Direct Request Full Path Disclosure

source: https://www.securityfocus.com/bid/10190/info Multiple vulnerabilities were reported to exist in phProfession, which is a third-party module for PostNuke. Path disclosure, cross-site scripting and SQL injection vulnerabilities were reported. Exploitation of these issues may reveal sensitiv...

[waraxe-2004-SA#022 - Multiple vulnerabilities in PostNuke 0.726 Phoenix - part 2]

================================================================================ waraxe-2004-SA022 ================================================================================ Multiple vulnerabilities in PostNuke 0.726 Phoenix - part 2...

waraxe-2004-SA022.txt

================================================================================ waraxe-2004-SA022 ================================================================================ Multiple vulnerabilities in PostNuke 0.726 Phoenix - part 2...

[waraxe-2004-SA#021 - Multiple vulnerabilities in phprofession 2.5 module for PostNuke]

================================================================================ waraxe-2004-SA021 ================================================================================ Multiple vulnerabilities in phprofession 2.5 module for PostNuke...

waraxe-2004-SA021.txt

================================================================================ waraxe-2004-SA021 ================================================================================ Multiple vulnerabilities in phprofession 2.5 module for PostNuke...

PostNuke Phoenix 0.726 - openwindow.php?hlpfile Cross-Site Scripting

PostNuke Phoenix 0.726 - openwindow.php?hlpfile Cross-Site Scripting source: https://www.securityfocus.com/bid/10191/info Multiple vulnerabilities were reported to exist in PostNuke Phoenix. The following specific vulnerabilities were reported: - Multiple path disclosure vulnerabilities that occu...

PostNuke Phoenix 0.726 - 'openwindow.php?hlpfile' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10191/info Multiple vulnerabilities were reported to exist in PostNuke Phoenix. The following specific vulnerabilities were reported: - Multiple path disclosure vulnerabilities that occur when a user directly requests scripts in the "/includes/blocks/" an...

[Full-Disclosure] [waraxe-2004-SA#020 - Multiple vulnerabilities in PostNuke 0.726 Phoenix]

================================================================================ waraxe-2004-SA020 ================================================================================ Multiple vulnerabilities in PostNuke 0.726 Phoenix...

[KSA-005] Multiple vulnerabilities in Tutos

================================================= Kereval Security Advisory KSA-005 Multiple vulnerabilities in Tutos ================================================= PROGRAM: Tutos HOMEPAGE: http://www.tutos.org VULNERABLE VERSIONS: 1.1.20031017 RISK: Medium/High IMPACT: Cross Site Scripting /...

Tutos 1.1.20031017 - note_overview.php?id SQL Injection

Tutos 1.1.20031017 - noteoverview.php?id SQL Injection source: https://www.securityfocus.com/bid/10129/info Multiple vulnerabilities have been identified in various modules of TUTOS. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site...

Multiple Vulnerabilities In Tiki CMS/Groupware [ TikiWiki ]

Vendor : TikiWiki Project URL : http://www.tikiwiki.org Version : TikiWiki 1.8.1 && Earlier Risk : Multiple Vulnerabilities Description: Tiki CMS/Groupware aka TikiWiki is a powerful open-source Content Management System CMS and Groupware that can be used to create all sorts of Web applications,...

Tutos 1.1.20031017 - 'note_overview.php?id' SQL Injection

source: https://www.securityfocus.com/bid/10129/info Multiple vulnerabilities have been identified in various modules of TUTOS. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, and possibly SQL injection...

TikiWiki Project 1.8 - tiki-browse_categories.php?sort_mode SQL Injection

TikiWiki Project 1.8 - tiki-browsecategories.php?sortmode SQL Injection source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as...

TikiWiki Project 1.8 - tiki-read_article.php?articleId Cross-Site Scripting

TikiWiki Project 1.8 - tiki-readarticle.php?articleId Cross-Site Scripting source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such ...

TikiWiki Project 1.8 - tiki-index.php?comments_offset offset SQL Injections

TikiWiki Project 1.8 - tiki-index.php?commentsoffset offset SQL Injections source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such ...

TikiWiki Project 1.8 - tiki-list_faqs.php?sort_mode SQL Injection

TikiWiki Project 1.8 - tiki-listfaqs.php?sortmode SQL Injection source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path...

TikiWiki Project 1.8 - tiki-view_faq.php?faqId Cross-Site Scripting

TikiWiki Project 1.8 - tiki-viewfaq.php?faqId Cross-Site Scripting source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path...

TikiWiki Project 1.8 - tiki-list_trackers.php?offset SQL Injection

TikiWiki Project 1.8 - tiki-listtrackers.php?offset SQL Injection source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path...

TikiWiki Project 1.8 - tiki-index.php?comments_threshold Cross-Site Scripting

TikiWiki Project 1.8 - tiki-index.php?commentsthreshold Cross-Site Scripting source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks suc...