CVE-2005-3952: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the 1 category and 2 type parameters to viewcat.php, or 3 certain search parameters. NOTE: later a disclosure reported the affected version as 1.0...

PHP Labs Survey Wizard - SQL Injection

PHP Labs Survey Wizard - SQL Injection source: https://www.securityfocus.com/bid/15551/info PHP Labs Survey Wizard is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

PHP Labs Survey Wizard - SQL Injection

source: https://www.securityfocus.com/bid/15551/info PHP Labs Survey Wizard is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise ...

CVE-2005-1233

The CVE-2005-1233 issue concerns an XSS vulnerability in the PHP Labs proFile product’s index.php, exploitable via the (1) dir and (2) file parameters. The root cause is unsanitized input leading to arbitrary script/HTML injection in responses. Impact is remote code/input manipulation potential f...

CVE-2005-1233: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the 1 dir or 2 file parameters...

CVE-2005-1233

Cross-site scripting XSS vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the 1 dir or 2 file parameters...

PHP Labs - .proFile File URI Cross-Site Scripting

PHP Labs - .proFile File URI Cross-Site Scripting source: https://www.securityfocus.com/bid/13282/info PHP Labs proFile is prone to a cross-site scripting vulnerability. As a result, attackers may embed hostile HTML and script code in a malicious link to the affected application. If the link is...

PHP Labs - .proFile Dir URI Cross-Site Scripting

PHP Labs - .proFile Dir URI Cross-Site Scripting source: https://www.securityfocus.com/bid/13276/info PHP Labs proFile is prone to a cross-site scripting vulnerability. As a result, attackers may embed hostile HTML and script code in a malicious link to the affected application. If the link is...

[SA15027] PHP Labs proFile "dir" and "file" Cross-Site Scripting

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: PHP Labs proFile "dir" and "file" Cross-Site Scripting...

PHP Labs - '.proFile' Dir URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/13276/info PHP Labs proFile is prone to a cross-site scripting vulnerability. As a result, attackers may embed hostile HTML and script code in a malicious link to the affected application. If the link is followed, the code may be rendered by the victim's...

PHP Labs - '.proFile' File URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/13282/info PHP Labs proFile is prone to a cross-site scripting vulnerability. As a result, attackers may embed hostile HTML and script code in a malicious link to the affected application. If the link is followed, the code may be rendered by the victim's...