EUVD-2007-0755

Malware in sbrugna...

CVE-2007-0758

Summary : CVE-2007-0758 is a PHP remote file inclusion vulnerability in the lang.php component of PHPProbid 5.24. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the SRC attribute of an HTML element within the lang parameter. The affected product is PHPProbid 5.24;...

CVE-2006-3927

Cross-site scripting XSS vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitrary web script or HTML via the advsrc parameter...

CVE-2006-3927

CVE-2006-3927 is an XSS vulnerability in PhpProBid 5.24, exploitable via the advsrc parameter in auctionsearch.php. The connected records confirm the affected software/version and the vulnerable parameter, but there are no published remediation details in the provided documents. The exploitation ...

phpprobid524.txt

Phpprobid 5.24 http://www.phpprobid.com -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/auctionsearch.php?advsrc="alert/EllipsisSecurityTest/ http://target.xx/auctionsearch.php?start=1&advsrc="alert/EllipsisSecurityTest/ ------------- SQL injection...