PHPX 3.5.15/3.5.16 - 'gallery.php' SQL Injection

source: https://www.securityfocus.com/bid/23033/info PHPX is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitra...

Cross site scripting

Cross-site scripting XSS vulnerability in PHPX 3.5.9 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a url XCode tag in a posted message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0933

CVE-2006-0933 concerns a Cross-site Scripting (XSS) vulnerability in PHPX 3.5.9. The issue allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a url XCode tag contained in a posted message. The available connected documents confirm the affected software version...

CVE-2006-0933

Cross-site scripting XSS vulnerability in PHPX 3.5.9 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a url XCode tag in a posted message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

[SA18688] PHPX "url" XCode Script Insertion Vulnerability

TITLE: PHPX "url" XCode Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18688 VERIFY ADVISORY: http://secunia.com/advisories/18688/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHPX 3.x http://secunia.com/product/2967/ DESCRIPTION: Thomas Pollet ha...

PHPX 3.5.9 - XCode Tag HTML Injection

PHPX 3.5.9 - XCode Tag HTML Injection source: https://www.securityfocus.com/bid/16799/info PHPX is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code woul...

PHPX 3.5.9 - XCode Tag HTML Injection

source: https://www.securityfocus.com/bid/16799/info PHPX is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the context of the...

CVE-2005-3968

SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL commands, bypass authentication, and upload arbitrary PHP code via the username parameter...

CVE-2005-3968

The affected software is PHPX (versions 3.5.9 and earlier). The vulnerability is an SQL injection in the auth flow via the username parameter (auth.inc.php), which can allow remote attackers to bypass authentication and potentially upload arbitrary PHP code. The issue is triggered by unsafely con...

PhpX <= 3.5.9 SQL Injection -> login bypass -> remote command/code execution

PhpX = 3.5.9 SQL Injection - login bypass - remote command/code execution software: site: http://www.phpx.org/ description: "PHPX is a constantly evolving and changing Content Management System CMS.." vulnerable code in auth.inc.php at lines 22-26: ... if !isset$POSTusername header"Location:...

phpx_359_xpl.txt

PhpX login bypass - remote command/code execution software: site: http://www.phpx.org/ description: "PHPX is a constantly evolving and changing Content Management System CMS.." vulnerable code in auth.inc.php at lines 22-26: ... if !isset$POSTusername header"Location: login.php"; $password =...

PHPX 3.5.x - Admin login.php SQL Injection

PHPX 3.5.x - Admin login.php SQL Injection source: https://www.securityfocus.com/bid/15680/info PHPX is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation coul...

PHPX 3.5.x - 'Admin 'login.php' SQL Injection

source: https://www.securityfocus.com/bid/15680/info PHPX is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the application...

CVE-2004-2364

Cross-site request forgery CSRF vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using 1 admin/page.php, 2 admin/news.php, 3 admin/user.php, 4 admin/images.php, 5...

CVE-2004-2362

PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the limit parameter, which leaks the pathname in a database error message, as demonstrated using forums.php...

CVE-2004-2362

CVE-2004-2362 affects PHPX 3.2.6 and earlier. The issue allows remote attackers to obtain the physical path of PHPX by supplying a null or invalid value in the “limit” parameter, causing the pathname to be leaked in a database error message (demonstrated via forums.php). This is an information-di...

CVE-2004-2363

PHPX 3.0–3.2.6 contains a Validate-Before-Canonicalize flaw in functions.inc.php: checkURI can be bypassed with hex-encoded tags, enabling remote XSS via the limit parameter to forums.php and similar vectors. Impact is XSS without bypassing literal character checks. Affected component/function: c...

CVE-2004-2364

CVE-2004-2364 affects PHPX versions 3.0–3.2.6. A CSRF flaw lets remote attackers cause the administrator to trigger commands via specific admin URLs (admin/page.php, admin/news.php, admin/user.php, admin/images.php, admin/forums.php). The vulnerability’s root cause is CSRF that executes privilege...

CVE-2004-2363

Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allows remote attackers to conduct cross-site scripting XSS attacks via hex-encoded tags, which bypass the check for literal "", "", and "" characters, as demonstrated using the limi...

CVE-2004-2364

Cross-site request forgery CSRF vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using 1 admin/page.php, 2 admin/news.php, 3 admin/user.php, 4 admin/images.php, 5...