PHProfession 2.5 - modules.php?jcode Cross-Site Scripting

PHProfession 2.5 - modules.php?jcode Cross-Site Scripting source: https://www.securityfocus.com/bid/10190/info Multiple vulnerabilities were reported to exist in phProfession, which is a third-party module for PostNuke. Path disclosure, cross-site scripting and SQL injection vulnerabilities were...

PHProfession 2.5 - 'modules.php?offset' SQL Injection

source: https://www.securityfocus.com/bid/10190/info Multiple vulnerabilities were reported to exist in phProfession, which is a third-party module for PostNuke. Path disclosure, cross-site scripting and SQL injection vulnerabilities were reported. Exploitation of these issues may reveal sensitiv...

waraxe-2004-SA021.txt

================================================================================ waraxe-2004-SA021 ================================================================================ Multiple vulnerabilities in phprofession 2.5 module for PostNuke...

[waraxe-2004-SA#021 - Multiple vulnerabilities in phprofession 2.5 module for PostNuke]

================================================================================ waraxe-2004-SA021 ================================================================================ Multiple vulnerabilities in phprofession 2.5 module for PostNuke...

CVE-2004-1954

Cross-site scripting XSS vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jcode parameter...