EUVD-2002-1864

Malware in sbrugna...

EUVD-2008-2557

Malware in sbrugna...

EUVD-2009-4223

Malware in sbrugna...

EUVD-2009-4222

Malware in sbrugna...

CVE-2009-4254

PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to 1 edCss.inc.php, 2 foot.inc.php, 3 getcsscolors.inc.php, 4 head.inc.php, 5 headstuff.inc.php, 6 loglist.inc.php, and 7 pphloggersend.inc.php in include/, which reveals the installation path in an...

Cross site scripting

Cross-site scripting XSS vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the edit parameter...

Information disclosure

PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to 1 edCss.inc.php, 2 foot.inc.php, 3 getcsscolors.inc.php, 4 head.inc.php, 5 headstuff.inc.php, 6 loglist.inc.php, and 7 pphloggersend.inc.php in include/, which reveals the installation path in an...

CVE-2009-4253

Cross-site scripting XSS vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the edit parameter...

CVE-2009-4254

PowerPhlogger 2.2.5 is affected by an information disclosure vulnerability where remote attackers can obtain sensitive data via direct requests to files in the include/ directory (edCss.inc.php, foot.inc.php, get_csscolors.inc.php, head.inc.php, head_stuff.inc.php, loglist.inc.php, pphlogger_send...

CVE-2009-4253

Cross-site scripting XSS vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the edit parameter...

CVE-2009-4254

PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to 1 edCss.inc.php, 2 foot.inc.php, 3 getcsscolors.inc.php, 4 head.inc.php, 5 headstuff.inc.php, 6 loglist.inc.php, and 7 pphloggersend.inc.php in include/, which reveals the installation path in an...

CVE-2009-4253

Power Phlogger vulnerability CVE-2009-4253: Cross-site scripting in dspStats.php (PowerPhlogger 2.2.5) allows remote attackers to inject arbitrary web script or HTML via the edit parameter. Root cause: failure to properly sanitize user-supplied input. The issue is documented across multiple feeds...

CVE-2009-4254: Exposure of Sensitive Information to an Unauthorized Actor

PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to 1 edCss.inc.php, 2 foot.inc.php, 3 getcsscolors.inc.php, 4 head.inc.php, 5 headstuff.inc.php, 6 loglist.inc.php, and 7 pphloggersend.inc.php in include/, which reveals the installation path in an...

CVE-2009-4253: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the edit parameter...

PowerPhlogger Detection

This host is running PowerPhlogger, a complete counter hosting tool. It lets you offer counter service to others from your site. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PowerPhlogger Detection

This host is running PowerPhlogger, a complete counter hosting tool. It lets you offer counter service to others from your site. OpenVAS Vulnerability Test $Id: PowerPhloggerdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ PowerPhlogger Detection Authors: Michael Meyer Copyright: Copyright c 2009...

Sql injection

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the cssstr parameter in an edit action...

CVE-2008-2562

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the cssstr parameter in an edit action...

CVE-2008-2562

PowerPhlogger 2.2.5 and earlier is affected by an SQL injection in edCss.php, exploitable via the css_str parameter in an edit action. The flaw allows remote authenticated users to execute arbitrary SQL commands. Affected component: edCss.php (PowerPhlogger). Root cause: improper handling of inpu...

CVE-2008-2562: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the cssstr parameter in an edit action...