CVE-2002-2178

CVE-2002-2178 is a cross-site scripting (XSS) vulnerability in the article.php module of phpWebSite 0.8.3. The issue allows remote attackers to execute arbitrary JavaScript by supplying a crafted sid parameter, demonstrated via an IMG tag. The available connected documents confirm the affected pr...

CVE-2002-2178

Cross-site scripting XSS vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute arbitrary Javascript script via the sid parameter, as demonstrated using an IMG tag...

CVE-2002-2178: Undefined Security Weakness

Cross-site scripting XSS vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute arbitrary Javascript script via the sid parameter, as demonstrated using an IMG tag...

phpWebSite index.php Search Module SQL Injection

The remote host is running a version of phpWebSite that fails to sanitize user-supplied input to the 'module' parameter of the 'search' module before using it in database queries. An attacker may be able to exploit this issue to obtain sensitive information such as user names and password hashes ...

[Full-disclosure] Security Advisory: SQL injection in PhpWebSite <= 0.10.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ======================================================================== phpWebSite Security Advisory [email protected] http://phpwebsite.appstate.edu Kevin Wilcox 12 October 2005...

phpWebSite 0.10.0 - module SQL Injection

phpWebSite 0.10.0 - module SQL Injection !/usr/bin/perl use LWP::Simple; $serv = $ARGV0; $path = $ARGV1; $name = $ARGV2; sub usage print "\nUsage: $0 server path username \n"; print "sever - URL\n"; print "path - path to index.php\n"; print "username - name register user\n\n"; exit ; sub work pri...

phpWebSite <= 0.10.0 (module) SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== phpWebSite Search&\160;\w32/elseprint "... One of those days :\n"; sub showh print " User: $name\n"; print " H...

phpWebSite &lt;= 0.10.0 (module) SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::Simple; $serv = $ARGV0; $path = $ARGV1; $name = $ARGV2; sub usage print "\nUsage: $0 server path username \n"; print "sever - URL\n"; print "path - path to index.php\n"; print "username - name register user\n\n"; exit ; sub work print qq...

phpWebSite 0.10.0 - 'module' SQL Injection

!/usr/bin/perl use LWP::Simple; $serv = $ARGV0; $path = $ARGV1; $name = $ARGV2; sub usage print "\nUsage: $0 server path username \n"; print "sever - URL\n"; print "path - path to index.php\n"; print "username - name register user\n\n"; exit ; sub work print qq ---------------------------------...

GLSA-200508-21 : phpWebSite: Arbitrary command execution through XML-RPC and SQL injection

The remote host is affected by the vulnerability described in GLSA-200508-21 phpWebSite: Arbitrary command execution through XML-RPC and SQL injection phpWebSite uses an XML-RPC library that improperly handles XML-RPC requests and responses with malformed nested tags. Furthermore, 'matrixkiller'...

phpWebSite: Arbitrary command execution through XML-RPC and SQL injection

Background phpWebSite is a web site content management system. Description phpWebSite uses an XML-RPC library that improperly handles XML-RPC requests and responses with malformed nested tags. Furthermore, "matrixkiller" reported that phpWebSite is vulnerable to an SQL injection attack. Impact A...

phpWebSite 0.10.1 Full SQL injection

TITLE: phpWebSite 0.10.1 Full SQL injection Severity: Medium or even critical SOFTWARE: phpWebSite 0.10.1 Full DESCRIPTION: phpWebSite 0.10.1 full is vulnable to a sql injection.Here is a example: http://localhost/phpweb/index.php?module=sqlinjection DB Error: syntax error SELECT showblock,...

phpwebsite0101.txt

TITLE: ===== phpWebSite 0.10.1 Full SQL Injection SOFTWARE: ========== phpWebSite 0.10.1 Full INFO: ===== phpWebSite provides a complete web site content management system. DESCRIPTION: ============ phpWebSite 0.10.1 full is vulnerable to an sql injection attack. Here is an example:...

[Full-disclosure] phpWebSite 0.10.1 Full SQL Injection

TITLE: ===== phpWebSite 0.10.1 Full SQL Injection SOFTWARE: ========== phpWebSite 0.10.1 Full INFO: ===== phpWebSite provides a complete web site content management system. DESCRIPTION: ============ phpWebSite 0.10.1 full is vulnerable to an sql injection attack. Here is an example:...

CVE-2004-2322

SQL injection vulnerability in the 1 announce and 2 notes modules of phpWebSite before 0.9.3-2 allows remote attackers to execute arbitrary SQL queries, as demonstrated using the ANNid parameter to the announce module...

CVE-2004-2322

CVE-2004-2322 affects phpWebSite before 0.9.3-2. SQL injection exists in the announce and notes modules (ANN_id parameter) that allows remote attackers to execute arbitrary SQL queries. Impact: partial confidentiality/integrity/availability. Exploitation details are not provided in the available ...

CVE-2004-2322: Undefined Security Weakness

SQL injection vulnerability in the 1 announce and 2 notes modules of phpWebSite before 0.9.3-2 allows remote attackers to execute arbitrary SQL queries, as demonstrated using the ANNid parameter to the announce module...

phpWebSite: Multiple vulnerabilities

Background phpWebSite is a content management system written in PHP. Description phpWebSite fails to sanitize input sent to the XML-RPC server using the "POST" method. Other unspecified vulnerabilities have been discovered by Diabolic Crab of Hackers Center. Impact A remote attacker could exploit...

GLSA-200507-07 : phpWebSite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200507-07 phpWebSite: Multiple vulnerabilities phpWebSite fails to sanitize input sent to the XML-RPC server using the 'POST' method. Other unspecified vulnerabilities have been discovered by Diabolic Crab of Hackers Center. Impac...

[SA15958] phpWebSite SQL Injection and Disclosure of Sensitive Information

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...