EUVD-2010-4922

Malware in sbrugna...

CVE-2010-4958

SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-4958

SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-4958

SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-4958

CVE-2010-4958 affects Prado Portal 1.2.0 via the index.php page parameter "page". The NVD entry specifies an SQL injection that lets remote attackers execute arbitrary SQL commands through the vulnerable parameter. HTBridge’s advisory also documents a Cross‑Site Scripting (XSS) possibility stemmi...

PT-2011-1893

Name of the Vulnerable Software and Affected Versions Prado Portal version 1.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the page parameter in the "index.php" file. Recommendations For Prado Portal version 1.2.0, consider restricting...

CVE-2010-4958: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

XSS vulnerability in Prado Portal

Vulnerability ID: HTB22515 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpradoportal.html Product: Prado Portal Vendor: Compudesign ApS http://www.pradoportal.dk/ Vulnerable Version: 1.2.0 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: XSS Cross...

Prado Portal 1.2.0 Cross Site Scripting

Vulnerability ID: HTB22515 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpradoportal.html Product: Prado Portal Vendor: Compudesign ApS http://www.pradoportal.dk/ Vulnerable Version: 1.2.0 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: XSS Cross...

Prado Portal 1.2 - page Cross-Site Scripting

Prado Portal 1.2 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/42276/info Prado Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Prado Portal 1.2 - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42276/info Prado Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Cross-site Scripting (XSS) Vulnerability in Prado Portal

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Prado Portal which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Prado Portal: CVE-2010-4958 The vulnerability exists due to input sanitation error in the "page"...