EUVD-2005-2401

Malware in sbrugna...

PHPFinance Detection

This host is running PHPFinance, a financial management program. OpenVAS Vulnerability Test $Id: gbPHPFinancedetect.nasl 5735 2017-03-27 12:27:20Z cfi $ PHPFinance Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free software; you can...

PHPFinance 'group.php' SQL Injection and HTML Injection Vulnerabilities

PHPFinance is prone to an SQL-injection vulnerability and an HTML- injection vulnerability because it fails to sufficiently sanitize user- supplied input. An attacker may exploit the HTML-injection issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

PHPFinance 'group.php' SQL Injection and HTML Injection Vulnerabilities

PHPFinance is prone to an SQL-injection vulnerability and an HTML- injection vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

PHPFinance Detection

This host is running PHPFinance, a financial management program. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHPFinance 0.6 - group.php SQL Injection HTML Injection

PHPFinance 0.6 - group.php SQL Injection HTML Injection source: https://www.securityfocus.com/bid/42230/info PHPFinance is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may exploit the...

PHPFinance 0.6 - '/group.php' SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/42230/info PHPFinance is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may exploit the HTML-injection issue to execute arbitrary script code in the...

CVE-2005-2400

The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges...

CVE-2005-2400

The CVE-2005-2400 entry concerns PHPFinance 0.3, where the inc.login.php script permits remote attackers to bypass authentication and gain privileges. The core issue is an authentication bypass in the login handling, leading to potential privilege escalation. Public references and metrics indicat...

CVE-2005-2400

The inc.login.php scripts in PHPFinance 0.3 allows remote attackers to bypass the login and gain privileges...

[SA13276] PHPFinance Logon Bypass Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...