PT-2005-3098 · Plague · Plague News System

Name of the Vulnerable Software and Affected Versions: Plague News System versions 0.6 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cid parameter in the "index.php" endpoint. Recommendations: For Plague News System versions...

PT-2005-3100 · Plague · Plague News System

Name of the Vulnerable Software and Affected Versions: Plague News System versions 0.6 and earlier Description: The issue allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter in the delete.php file. Recommendations: For Plague News...

PT-2005-3099 · Plague · Plague News System

Name of the Vulnerable Software and Affected Versions: Plague News System versions 0.6 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the cid parameter in the "index.php" file...

Plague News System 0.7 - CID Cross-Site Scripting

Plague News System 0.7 - CID Cross-Site Scripting source: https://www.securityfocus.com/bid/14137/info Plague News System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' script. An...

[SA15902] Plague News System SQL Injection and Security Bypass Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Plague News System 0.7 - CID SQL Injection

Plague News System 0.7 - CID SQL Injection source: https://www.securityfocus.com/bid/14136/info Plague News System is prone to an SQL injection vulnerability. As a result, the attacker may modify the structure and logic of an SQL query that is made by the application. Other attacks may be possibl...

Plague News System 0.7 - delete.php Access Restriction Bypass

Plague News System 0.7 - delete.php Access Restriction Bypass source: https://www.securityfocus.com/bid/14139/info Plague News System is prone to an access restriction bypass vulnerability. The issue exists due to a lack of sanity checks performed by 'delete.php' on deletion requests passed to th...

Plague News System 0.7 - 'CID' SQL Injection

source: https://www.securityfocus.com/bid/14136/info Plague News System is prone to an SQL injection vulnerability. As a result, the attacker may modify the structure and logic of an SQL query that is made by the application. Other attacks may be possible depending on the capabilities of the...

Plague News System 0.7 - 'delete.php' Access Restriction Bypass

source: https://www.securityfocus.com/bid/14139/info Plague News System is prone to an access restriction bypass vulnerability. The issue exists due to a lack of sanity checks performed by 'delete.php' on deletion requests passed to the script. A remote attacker may exploit this issue to delete...

Plague News System 0.7 - 'CID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14137/info Plague News System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' script. An attacker may leverage this issue to have arbitrary...