EUVD-2006-1570

Malware in sbrugna...

RedCMS 0.1 register.php Multiple Field XSS

No description provided by source. source: http://www.securityfocus.com/bid/17336/info RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to HTML-injection and...

RedCMS 0.1 profile.php u Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17336/info RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to HTML-injection and...

RedCMS 0.1 login.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17336/info RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to HTML-injection and...

[eVuln] RedCMS Multiple XSS and SQL Injection Vulnerabilities

New eVuln Advisory: RedCMS Multiple XSS and SQL Injection Vulnerabilities http://evuln.com/vulns/115/summary.html --------------------Summary---------------- eVuln ID: EV0115 CVE: CVE-2006-1568 CVE-2006-1569 Software: RedCMS Sowtware's Web Site: http://redcms.co.uk/ Versions: 0.1 Critical Level:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 email, 2 location, or 3 website parameters...

Sql injection

Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters to a login.php or b register.php; or 3 u parameter to c profile.php...

CVE-2006-1568

Multiple cross-site scripting XSS vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 email, 2 location, or 3 website parameters...

CVE-2006-1569

Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters to a login.php or b register.php; or 3 u parameter to c profile.php...

CVE-2006-1568

Multiple cross-site scripting XSS vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 email, 2 location, or 3 website parameters...

CVE-2006-1568

RedCMS 0.1 is affected in register.php by multiple XSS vulnerabilities. The vulnerable parameters are email, location, and website, through which remote attackers can inject arbitrary web script or HTML. The reported issue affects RedCMS 0.1 and is documented across multiple sources; no explicit ...

CVE-2006-1569

RedCMS 0.1 is affected by multiple SQL injection vulnerabilities. The issues arise from unsanitized user input used in SQL queries for login.php (username/password), register.php (username/password), and profile.php (parameter u). Remote attackers could potentially execute arbitrary SQL commands ...

CVE-2006-1569

Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters to a login.php or b register.php; or 3 u parameter to c profile.php...

RedCMS 0.1 - login.php Multiple SQL Injections

RedCMS 0.1 - login.php Multiple SQL Injections source: https://www.securityfocus.com/bid/17336/info RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to HTML-injecti...

RedCMS 0.1 - 'profile.php?u' SQL Injection

source: https://www.securityfocus.com/bid/17336/info RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to HTML-injection and SQL-injection vulnerabilities. A...

RedCMS 0.1 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17336/info RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to HTML-injection and SQL-injection vulnerabilities. A...

RedCMS 0.1 - 'login.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/17336/info RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to HTML-injection and SQL-injection vulnerabilities. A...