EUVD-2006-0579

Malware in sbrugna...

EUVD-2006-0578

Malware in sbrugna...

EUVD-2006-0577

Malware in sbrugna...

[eVuln] phpstatus Authentication Bypass

New eVuln Advisory: phpstatus Authentication Bypass http://evuln.com/vulns/61/summary.html --------------------Summary---------------- eVuln ID: EV0061 CVE: CVE-2006-0570 CVE-2006-0571 CVE-2006-0572 Vendor: Hinton Design Vendor's Web Site: http://www.hintondesign.org Software: phpstatus Sowtware'...

EV0061.txt

New eVuln Advisory: phpstatus Authentication Bypass http://evuln.com/vulns/61/summary.html --------------------Summary---------------- eVuln ID: EV0061 CVE: CVE-2006-0570 CVE-2006-0571 CVE-2006-0572 Vendor: Hinton Design Vendor's Web Site: http://www.hintondesign.org Software: phpstatus Sowtware'...

[SA18791] PHPStatus Multiple Vulnerabilities

TITLE: PHPStatus Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18791 VERIFY ADVISORY: http://secunia.com/advisories/18791/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: PHPStatus 1.x http://secunia.com/product/7956...

Authentication flaw

phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication...

Sql injection

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpcmagicquotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via 1 the username parameter in check.php and 2 unknown attack vectors in the administrative interface...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

CVE-2006-0570

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpcmagicquotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via 1 the username parameter in check.php and 2 unknown attack vectors in the administrative interface...

CVE-2006-0571

Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

CVE-2006-0572

phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication...

CVE-2006-0572

CVE-2006-0572 affects phpstatus 1.0, where authentication can be bypassed because cookies are used to identify the user without verifying a password. The vulnerability is tied to the cookies-based authentication flow (vulnerable in check.php), enabling remote attackers to bypass login. Exploit in...

CVE-2006-0570

Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpcmagicquotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via 1 the username parameter in check.php and 2 unknown attack vectors in the administrative interface...

CVE-2006-0570

phpstatus 1.0 is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL and bypass authentication via the check.php username parameter and via cookie-based authentication when magic_quotes_gpc is off. Official details in the connected sources descr...

CVE-2006-0571

Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...

CVE-2006-0571

CVE-2006-0571 affects phpstatus 1.0 with multiple XSS weaknesses that allow remote attackers to inject arbitrary web script or HTML via the administrative interface. The vulnerability is described as unknown attack vectors in the admin area; the provided documents do not specify affected patch ve...

CVE-2006-0572

phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass authentication...