8 matches found
EUVD-2011-5090
Malware in sbrugna...
CVE-2011-5190
Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...
CVE-2011-5190
Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...
CVE-2011-5190
Social Book Facebook Clone 2010 has XSS vulnerabilities via PATH_INFO in multiple PHP scripts (signup.php, lostpass.php, login.php, index.php, help_tos.php, help_contact.php, help.php). The description states remote attackers can inject arbitrary web script or HTML, indicating an input sanitizati...
PT-2012-2167
Name of the Vulnerable Software and Affected Versions Social Book Facebook Clone 2010 Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO parameter to several API endpoints, including "/signup.php", "/lostpass.php", "/login.php", "/index.php",...
CVE-2011-5190: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...
Social Book Facebook Clone Script Cross Site Scripting
Exploit Title: Social Book Facebook Clone Script Reflected XSS Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE XSS can be done using the command input Vulnerable Page: signup.php lostpass.php login.php...