EUVD-2011-5201

Malware in sbrugna...

EUVD-2011-5200

Malware in sbrugna...

CVE-2011-5302

Cross-site request forgery CSRF vulnerability in adm/adminedit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication of administrators for requests that modify credentials...

CVE-2011-5301

Multiple cross-site scripting XSS vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the storyurl parameter to addstory.php, 2 the email parameter to editprofile.php, 3 the title parameter to adm/contentadd.php, or 4 the username parameter to...

mainkeys.net XSS vulnerability

Open Bug Bounty ID: OBB-594273 Description| Value ---|--- Affected Website:| mainkeys.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHPDug Cross-Site Request Forgery Vulnerability (CNVD-2015-00242)

PHPDug is an open source social news site that supports sharing stories, news, images and more. PHPDug 2.0.0 suffers from a cross-site request forgery vulnerability that allows remote attackers to hijack administrative authentication to hijack authentication of requests for administrars to modify...

CVE-2011-5302

Cross-site request forgery CSRF vulnerability in adm/adminedit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication of administrators for requests that modify credentials...

CVE-2011-5301

Multiple cross-site scripting XSS vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the storyurl parameter to addstory.php, 2 the email parameter to editprofile.php, 3 the title parameter to adm/contentadd.php, or 4 the username parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the storyurl parameter to addstory.php, 2 the email parameter to editprofile.php, 3 the title parameter to adm/contentadd.php, or 4 the username parameter to...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in adm/adminedit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication of administrators for requests that modify credentials...

CVE-2011-5302

PHPDug 2.0.0 is affected by CVE-2011-5302, a CSRF flaw in adm/admin_edit.php that can allow an attacker to hijack administrator sessions and modify credentials. Root cause is a Cross-site request forgery vulnerability in the admin_edit.php endpoint. Multiple sources document the affected componen...

CVE-2011-5302

Cross-site request forgery CSRF vulnerability in adm/adminedit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication of administrators for requests that modify credentials...

CVE-2011-5301

PHPDug 2.0.0 is affected by multiple cross-site scripting (XSS) vulnerabilities. The CVE-2011-5301 entry describes that remote attackers can inject arbitrary script/HTML via (1) story_url in add_story.php, (2) email in editprofile.php, (3) title in adm/content_add.php, or (4) username in adm/admi...

CVE-2011-5301

Multiple cross-site scripting XSS vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the storyurl parameter to addstory.php, 2 the email parameter to editprofile.php, 3 the title parameter to adm/contentadd.php, or 4 the username parameter to...

PT-2015-3497

Name of the Vulnerable Software and Affected Versions PHPDug version 2.0.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including the story url parameter to "add story.php", the email parameter to "editprofile.php", the title paramet...

PT-2015-3498

Name of the Vulnerable Software and Affected Versions PHPDug version 2.0.0 Description A cross-site request forgery issue exists, allowing remote attackers to hijack administrator authentication for requests that modify credentials. This occurs in the adm/admin edit.php file. Recommendations For...

CVE-2011-5301: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the storyurl parameter to addstory.php, 2 the email parameter to editprofile.php, 3 the title parameter to adm/contentadd.php, or 4 the username parameter to...

CVE-2011-5302: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in adm/adminedit.php in PHPDug 2.0.0 allows remote attackers to hijack the authentication of administrators for requests that modify credentials...

PHPDug 2.0.0 - Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22971 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinphpdug.html Product: PHPDug Vendor: Kubelabs.com http://www.kubelabs.com/ Vulnerable Version: 2.0.0 and probably prior versions Vendor Notification: 21 April 2011 Vulnerability Type:...

PHPDug 2.0.0 - Cross Site Scripting Vulnerability

PHPDug 2.0.0 跨站脚本漏洞 存在漏洞文件： upcoming.php ----省略部分代码 $GET'id'和$GET'i'是一样的 ifisset$GET'id' $GET'i' = $GET'id'; elseifisset$GET'i' $GET'id' = $GET'i'; ----省略部分代码 $page = new HtmlTemplate "templates/" . $config'tplname' . "/catnoresults.html"; ----省略部分代码 $page-SetLoop 'PAGES',...