EUVD-2009-4222

Malware in sbrugna...

EUVD-2002-1864

Malware in sbrugna...

EUVD-2008-2557

Malware in sbrugna...

EUVD-2009-4223

Malware in sbrugna...

CVE-2009-4254

PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to 1 edCss.inc.php, 2 foot.inc.php, 3 getcsscolors.inc.php, 4 head.inc.php, 5 headstuff.inc.php, 6 loglist.inc.php, and 7 pphloggersend.inc.php in include/, which reveals the installation path in an...

Information disclosure

PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to 1 edCss.inc.php, 2 foot.inc.php, 3 getcsscolors.inc.php, 4 head.inc.php, 5 headstuff.inc.php, 6 loglist.inc.php, and 7 pphloggersend.inc.php in include/, which reveals the installation path in an...

CVE-2009-4253

Cross-site scripting XSS vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the edit parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the edit parameter...

CVE-2009-4254

PowerPhlogger 2.2.5 is affected by an information disclosure vulnerability where remote attackers can obtain sensitive data via direct requests to files in the include/ directory (edCss.inc.php, foot.inc.php, get_csscolors.inc.php, head.inc.php, head_stuff.inc.php, loglist.inc.php, pphlogger_send...

CVE-2009-4253

Power Phlogger vulnerability CVE-2009-4253: Cross-site scripting in dspStats.php (PowerPhlogger 2.2.5) allows remote attackers to inject arbitrary web script or HTML via the edit parameter. Root cause: failure to properly sanitize user-supplied input. The issue is documented across multiple feeds...

CVE-2009-4253

Cross-site scripting XSS vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the edit parameter...

CVE-2009-4254

PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to 1 edCss.inc.php, 2 foot.inc.php, 3 getcsscolors.inc.php, 4 head.inc.php, 5 headstuff.inc.php, 6 loglist.inc.php, and 7 pphloggersend.inc.php in include/, which reveals the installation path in an...

PowerPhlogger Detection

This host is running PowerPhlogger, a complete counter hosting tool. It lets you offer counter service to others from your site. OpenVAS Vulnerability Test $Id: PowerPhloggerdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ PowerPhlogger Detection Authors: Michael Meyer Copyright: Copyright c 2009...

PowerPhlogger Detection

This host is running PowerPhlogger, a complete counter hosting tool. It lets you offer counter service to others from your site. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sql injection

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the cssstr parameter in an edit action...

CVE-2008-2562

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the cssstr parameter in an edit action...

CVE-2008-2562

PowerPhlogger 2.2.5 and earlier is affected by an SQL injection in edCss.php, exploitable via the css_str parameter in an edit action. The flaw allows remote authenticated users to execute arbitrary SQL commands. Affected component: edCss.php (PowerPhlogger). Root cause: improper handling of inpu...

CVE-2002-1885

PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger PPhlogger 2.0.9 through 2.2.2 allows remote attackers to execute arbitrary PHP code via the relpath parameter...

CVE-2002-1885

CVE-2002-1885 affects PowerPhlogger (PPhlogger) 2.0.9–2.2.2, where a PHP remote file inclusion via the rel_path parameter allows an attacker to execute arbitrary PHP code. Root cause is an RFI vulnerability in showhits.php3. The entry notes a high impact with potential partial confidentiality/int...

CVE-2002-1885

PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger PPhlogger 2.0.9 through 2.2.2 allows remote attackers to execute arbitrary PHP code via the relpath parameter...