EUVD-2010-1123

Malware in sbrugna...

EUVD-2010-1122

Malware in sbrugna...

CVE-2010-1090

SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the action parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 city, 3 email, 4 state, and 5 message parameters...

Sql injection

SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the action parameter...

CVE-2010-1090

CVE-2010-1090 describes a SQL injection in the PHP app phpMySite via the parameter action to index.php . The root cause is improper input handling allowing remote attackers to craft SQL commands; impact per sources is arbitrary SQL execution with partial confidentiality, integrity, and availabili...

CVE-2010-1091

CVE-2010-1091 affects phpMySite’s contact.php, enabling multiple XSS via the name, city, email, state, and message parameters. The affected component is the contact form handling in phpMySite. Root cause: unescaped user-supplied input in these fields. Impact: remote attackers can inject arbitrary...

CVE-2010-1090

SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the action parameter...

CVE-2010-1091

Multiple cross-site scripting XSS vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 city, 3 email, 4 state, and 5 message parameters...

CVE-2010-1090: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in phpMySite allows remote attackers to execute arbitrary SQL commands via the action parameter...

CVE-2010-1091: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 city, 3 email, 4 state, and 5 message parameters...

phpMySite Cross Site Scripting / SQL Injection

================================================================= phpMySite XSS/SQLi Multiple Remote Vulnerabilities ================================================================= Author: Crux Homepage: http://hack-tech.com Date: 2-27-2010 Software Link: http://www.phpmysite.com/ Version: N/A...

phpMySite (XSS/SQLi) Multiple Vulnerabilities

No description provided by source. ================================================================= phpMySite XSS/SQLi Multiple Remote Vulnerabilities ================================================================= Author: Crux Homepage: http://hack-tech.com Date: 2-27-2010 Software Link:...

phpMySite - Cross-Site Scripting SQL Injection

phpMySite - Cross-Site Scripting SQL Injection ================================================================= phpMySite XSS/SQLi Multiple Remote Vulnerabilities ================================================================= Author: Crux Homepage: http://hack-tech.com Date: 2-27-2010 Softwar...

phpMySite (XSS/SQLi) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ==================================================== phpMySite XSS/SQLi Multiple Remote Vulnerabilities ==================================================== ================================================================= phpMySite XSS/SQ...

phpMySite - Cross-Site Scripting / SQL Injection

================================================================= phpMySite XSS/SQLi Multiple Remote Vulnerabilities ================================================================= Author: Crux Homepage: http://hack-tech.com Date: 2-27-2010 Software Link: http://www.phpmysite.com/ Version: N/A...