EUVD-2010-4748

Malware in sbrugna...

EUVD-2010-4808

Malware in sbrugna...

EUVD-2010-4749

Malware in sbrugna...

Ad Manager Pro Multiple SQL Injection And XSS Vulnerabilities

Ad Manager Pro is prone to multiple sql injection and cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PHP Web Scripts Text Exchange Pro - page Local File Inclusion

PHP Web Scripts Text Exchange Pro - page Local File Inclusion source: https://www.securityfocus.com/bid/55205/info PHP Web Scripts Text Exchange Pro is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this...

PHP Web Scripts Text Exchange Pro - 'page' Local File Inclusion

source: https://www.securityfocus.com/bid/55205/info PHP Web Scripts Text Exchange Pro is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of...

PHP Web Scripts Ad Manager Pro - 'page' Local File Inclusion

source: https://www.securityfocus.com/bid/55189/info PHP Web Scripts Ad Manager Pro is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of th...

CVE-2010-4843

SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execute arbitrary SQL commands via the pageId parameter...

CVE-2010-4843: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execute arbitrary SQL commands via the pageId parameter...

CVE-2010-4784

Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2010-4784

Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2010-4783

The CVE-2010-4783 entry concerns multiple cross-site scripting (XSS) vulnerabilities in index.php of PHP Web Scripts Easy Banner Free 2009.05.18. The root cause described in sources is that with magic_quotes_gpc disabled, an attacker can inject arbitrary web script or HTML via the siteurl and url...

CVE-2010-4784

CVE-2010-4784 describes multiple SQL injection vulnerabilities in the member.php component of PHP Web Scripts Easy Banner Free 2009.05.18. When magic_quotes_gpc is disabled, remote attackers may inject SQL via the (1) username and (2) password parameters. Details on exploitation, affected version...

CVE-2010-4783: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 siteurl and 2 urlbanner parameters...

CVE-2010-4784: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

SQL injection and Path Disclosure Auth Bypass in 4images 1.7.X

-----------Summary----------- eVuln ID: 200 Software: "Powered by 4images" Vendor: PHP Web Scripts Version: 4images 1.7.X dork: "Powered by 4images" Critical Level: medium Type: SQL injection and Path Disclosure Status: Unpatched. No reply from developers PoC: Available Solution: Not available...

Easy Banner Free SQL Injection

New eVuln Advisory: SQL injection Auth Bypass in Easy Banner Free Summary: http://evuln.com/vulns/147/summary.html Details: http://evuln.com/vulns/147/description.html -----------Summary----------- eVuln ID: EV0147 Software: Easy Banner Free Vendor: PHP Web Scripts Version: 2009.05.18 Critical...

Easy Banner Free Cross Site Scripting

New eVuln Advisory: URL XSS in Easy Banner Free Summary: http://evuln.com/vulns/148/summary.html Details: http://evuln.com/vulns/148/description.html -----------Summary----------- eVuln ID: EV0148 Software: Easy Banner Free Vendor: PHP Web Scripts Version: 2009.05.18 Critical Level: low Type: Cro...

[eVuln.com] URL XSS in Easy Banner Free

New eVuln Advisory: URL XSS in Easy Banner Free Summary: http://evuln.com/vulns/148/summary.html Details: http://evuln.com/vulns/148/description.html -----------Summary----------- eVuln ID: EV0148 Software: Easy Banner Free Vendor: PHP Web Scripts Version: 2009.05.18 Critical Level: low Type: Cro...

[eVuln.com] SQL injection Auth Bypass in Easy Banner Free

New eVuln Advisory: SQL injection Auth Bypass in Easy Banner Free Summary: http://evuln.com/vulns/147/summary.html Details: http://evuln.com/vulns/147/description.html -----------Summary----------- eVuln ID: EV0147 Software: Easy Banner Free Vendor: PHP Web Scripts Version: 2009.05.18 Critical...