23 matches found
EUVD-2008-2529
Malware in sbrugna...
EUVD-2008-2528
Malware in sbrugna...
EUVD-2008-2530
Malware in sbrugna...
Phoenix View CMS <= Pre Alpha2 (SQL/LFI/XSS) Multiple Vulnerabilities
No description provided by source. Phoenix View CMS = Pre Alpha2 Multiple Vulnerabilities LFISQLIXSS Found by : tw8 Date : 8.05.2008 Website && Forum : http://rstzone.org && http://rstzone.org/forum/ Bug type : LFI, SQLI & XSS Affected software description: Application : Phoenix View CMS Version ...
Sql injection
Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbitrary SQL commands via the del parameter to 1 gbuch.admin.php, 2 links.admin.php, 3 menue.admin.php, 4 news.admin.php, and 5 todo.admin.php in admin/module/...
Directory traversal
Directory traversal vulnerability in admin/adminframe.php in Phoenix View CMS Pre Alpha2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ltarget parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ltarget parameter to a admin/adminframe.php and the 2 conf parameter to b gbuch.admin.php, c links.admin.php, d menue.admin.php, e...
CVE-2008-2534
Directory traversal vulnerability in admin/adminframe.php in Phoenix View CMS Pre Alpha2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ltarget parameter...
CVE-2008-2535
Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbitrary SQL commands via the del parameter to 1 gbuch.admin.php, 2 links.admin.php, 3 menue.admin.php, 4 news.admin.php, and 5 todo.admin.php in admin/module/...
CVE-2008-2533
Multiple cross-site scripting XSS vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ltarget parameter to a admin/adminframe.php and the 2 conf parameter to b gbuch.admin.php, c links.admin.php, d menue.admin.php, e...
CVE-2008-2534
Directory traversal vulnerability in admin/adminframe.php in Phoenix View CMS Pre Alpha2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ltarget parameter...
CVE-2008-2535
Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbitrary SQL commands via the del parameter to 1 gbuch.admin.php, 2 links.admin.php, 3 menue.admin.php, 4 news.admin.php, and 5 todo.admin.php in admin/module/...
CVE-2008-2533
Multiple cross-site scripting (XSS) vulnerabilities exist in Phoenix View CMS Pre Alpha2 and earlier. The issue stems from unsanitized user input passed via the ltarget parameter to admin/admin_frame.php and via the conf parameter to the following pages in admin/module/: gbuch.admin.php, links.ad...
CVE-2008-2534
CVE-2008-2534 describes a directory traversal vulnerability in the Phoenix View CMS (Pre Alpha2 and earlier). The flaw resides in the admin/admin_frame.php component, where an attacker can manipulate the ltarget parameter (via .. path traversal) to include and execute arbitrary local files. This ...
CVE-2008-2535
Phoenix View CMS (Pre Alpha2 and earlier) contains multiple SQL injection vulnerabilities in the admin module. The issue arises via the del parameter in five files: gbuch.admin.php, links.admin.php, menue.admin.php, news.admin.php, and todo.admin.php, allowing remote attackers to execute arbitrar...
CVE-2008-2533
Multiple cross-site scripting XSS vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ltarget parameter to a admin/adminframe.php and the 2 conf parameter to b gbuch.admin.php, c links.admin.php, d menue.admin.php, e...
CVE-2008-2535: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbitrary SQL commands via the del parameter to 1 gbuch.admin.php, 2 links.admin.php, 3 menue.admin.php, 4 news.admin.php, and 5 todo.admin.php in admin/module/...
CVE-2008-2533: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ltarget parameter to a admin/adminframe.php and the 2 conf parameter to b gbuch.admin.php, c links.admin.php, d menue.admin.php, e...
CVE-2008-2534: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in admin/adminframe.php in Phoenix View CMS Pre Alpha2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ltarget parameter...
Phoenix View CMS <= Pre Alpha2 (SQL/LFI/XSS) Multiple Vulnerabilities
No description provided by source. Phoenix View CMS = Pre Alpha2 Multiple Vulnerabilities LFISQLIXSS Found by : tw8 Date : 8.05.2008 Website && Forum : http://rstzone.org && http://rstzone.org/forum/ Bug type : LFI, SQLI & XSS Affected software description: Application : Phoenix View CMS Version ...