38 matches found
EUVD-2005-0514
Malware in sbrugna...
EUVD-2008-0344
Malware in sbrugna...
EUVD-2003-1076
Malware in sbrugna...
CVE-2008-0334
Cross-site scripting XSS vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the LPREFNAME855 parameter...
pMachine 1.0/2.x /lib/ Multiple Script Direct Request Path Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/7980/info It has been reported that pMachine is prone to remote a patch disclosure vulnerability when accessing various scripts. When a request is made for a target PHP script, possibly requiring a blank URI parameter,...
PMachine 2.2.1 Lib.Inc.PHP Remote Include Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7919/info It has been reported that PMachine does not properly handle include files under some circumstances. Because of this, an attacker may be able to remotely execute commands...
pMachine 1.0/2.x Multiple Script sfx Parameter Path Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/7980/info It has been reported that pMachine is prone to remote a patch disclosure vulnerability when accessing various scripts. When a request is made for a target PHP script, possibly requiring a blank URI parameter,...
pMachine Pro 2.4.1 Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27282/info pMachine Pro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
pMachine 1.0/2.x Search Module Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7981/info Reportedly, pMachine is vulnerable to a cross-site scripting attack. The vulnerability is present in the search module. The issue presents itself likely due to insufficient sanitization performed on user-supplie...
PMachine Pro 2.4 - Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12597/info PMachine Pro is reported prone to a remote file include vulnerability. This issue affects the 'mailautocheck.php' script. An attacker may leverage this issue to execute arbitrary server-side script code on an...
Cross site scripting
Cross-site scripting XSS vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the LPREFNAME855 parameter...
CVE-2008-0334
Cross-site scripting XSS vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the LPREFNAME855 parameter...
CVE-2008-0334
CVE-2008-0334 affects PMachine Pro 2.4.1. The vulnerability is an XSS in the Spanish language preferences page (pm/language/spanish/preferences.php) exploitable via the L_PREF_NAME[855] parameter, allowing remote attackers to inject arbitrary web script or HTML. The CVSS metrics indicate a low ba...
CVE-2008-0334
Cross-site scripting XSS vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the LPREFNAME855 parameter...
pMachine Pro 2.4.1 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/27282/info pMachine Pro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...
pMachinePro-241-xss.txt
[email protected] found: pMachine Pro 2.4.1 Cross Site Scripting Vulnerability http://pmachinepro.com/ Vulnerable: site/path/pm/language/spanish/preferences.php Variables: LPREFGROUPS100 LPREFGROUPS110 LPREFNAME810 LPREFNAME850 etc PoC:...
pMachine Pro 2.4.1 - Multiple Cross-Site Scripting Vulnerabilities
pMachine Pro 2.4.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27282/info pMachine Pro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execut...
pmachineExec.txt
This is a multi-part message in MIME format. ------=NextPart000000001C516AC.9C269F50 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit pMachine Pro / pMachine Free Remote Code Execution vendor website: http://www.pmachine.com I. BACKGROUND PMachine is one of the most...
CVE-2005-0513
The CVE-2005-0513 issue is a PHP remote file inclusion in the Email This Entry add-on for pMachine Pro 2.4 (and possibly other pMachine Free variants) via mail_autocheck.php. An attacker can set pm_path to a URL containing PHP code, enabling arbitrary code execution on the remote server. The rela...
CVE-2003-1086
CVE-2003-1086 is a PHP remote file inclusion vulnerability in pm/lib.inc.php affecting pMachine Free and pMachine Pro 2.2/2.2.1. The issue arises from unvalidated pm_path, allowing an attacker to reference a remote URL containing PHP code and execute it on the server. Impact is remote code execut...