EUVD-2007-6526

Malware in sbrugna...

EUVD-2003-1337

Malware in sbrugna...

Logaholic profiles.php newconfname Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/27003/info Logaholic is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues, a cross-site scripting issue, and an HTML-injection issue. The issues occur because the application fail...

Sql injection

SQL injection vulnerability in administration/profiles.php in BoonEx Dolphin 7.1.4 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the members parameter. NOTE: this can be exploited by remote attackers by leveraging CVE-2014-4333...

CVE-2014-4333

BoonEx Dolphin 7.1.4 and earlier contains a CSRF vulnerability in administration/profiles.php that enables remote attackers to hijack administrator sessions for requests that trigger an SQL injection via the members[] parameter. The issue is related to CVE-2014-3810, which confirms an SQL injecti...

CVE-2013-1466

Multiple cross-site scripting XSS vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the 1 subject parameter to profiles.php; 2 address1, 3 address2, 4 calendartype, 5 city, 6 state, 7 title, 8 url, or 9 zipcode parameter to...

Cross-Site Scripting vulnerabilities in Geeklog

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в движке Geeklog. XSS: POST запрос на http://site/profiles.php?sid=1&what=emailstory: "scriptalertdocument.cookie/script В полях: Отправитель, Адрес отправителя, Получатель, Адрес получателя...

CVE-2007-6560

Multiple cross-site scripting XSS vulnerabilities in Logaholic before 2.0 RC8 allow remote attackers to inject arbitrary web script or HTML via 1 the newconfname parameter to profiles.php or 2 the conf parameter to index.php...

asianxoXSS.txt

AsianXO.com Homepage: http://www.asianxo.com/ Effected files: directory.php profiles.php Input boxes of editing profile ---------------------------- XSS Vulnerability via dirid: Directory.php PoC: http://www.axo2.com/directory.php?dirid=1" inaurl injection along with tags, which also reveals some...

CVE-2002-1723

Powerboards 2.2b is affected. An unauthenticated remote attacker can induce an error message in profiles.php by sending a cookie with a non-existent username, causing the full backend database path to be disclosed. This is a direct information disclosure vulnerability exposing directory/path deta...