77 matches found
SQLiteManager <= 1.2.0 XSS Vulnerability
SQLiteManager is prone to a cross-site scripting XSS vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
SQLiteManager Cross-Site Scripting Vulnerability
This host is running SQLiteManager and is prone to Cross Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbsqlitemanagerxssvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ SQLiteManager Cross-Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Network...
SQLiteManager Detection (HTTP)
HTTP based detection of SQLiteManager. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.800280";...
Cross site scripting
Cross-site scripting XSS vulnerability in main.php in SQLiteManager 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...
CVE-2009-4539
Cross-site scripting XSS vulnerability in main.php in SQLiteManager 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...
CVE-2009-4539
SQLiteManager 1.2.0 is affected by a Cross-Site Scripting (XSS) vulnerability in main.php that allows an attacker to inject arbitrary script via the redirect parameter. The issue is a client-side/script injection risk arising from user-controlled redirect data; no exploit details are provided in ...
CVE-2009-4539
Cross-site scripting XSS vulnerability in main.php in SQLiteManager 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...
CVE-2009-4539: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in main.php in SQLiteManager 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...
SQLiteManager Cross Site Scripting
SqLiteManager All Version Cross Site Scripting Found by : Hadi Kiamarsi Contact : [email protected] Download : http://downloads.sourceforge.net/project/sqlitemanager/sqlitemanager/1.2.0/SQLiteManager-1.2.0.zip?usemirror=heanet PoC : http://www.example.com/main.php?redirect=alert'Hadi Kiamars...
XSS in SqLiteManager
SqLiteManager All Version Cross Site Scripting Found by : Hadi Kiamarsi Contact : [email protected] Download : http://downloads.sourceforge.net/project/sqlitemanager/sqlitemanager/1.2.0/SQLiteManager-1.2.0.zip?usemirror=heanet PoC : http://www.example.com/main.php?redirect=scriptalert'Hadi...
SQLiteManager 1.2 - main.php Cross-Site Scripting
SQLiteManager 1.2 - main.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36002/info SQLiteManager is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
SQLiteManager 1.2 - 'main.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/36002/info SQLiteManager is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...
CVE-2008-0516
PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Remote file inclusion
PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0516
CVE-2008-0516 affects SQLiteManager 1.2.0 via a PHP remote file inclusion in spaw/dialogs/confirm.php. The vulnerability stems from unsanitized input in the spaw_root parameter, enabling an attacker to include a remote URL and execute arbitrary PHP code on the server. Reported impact is remote co...
CVE-2008-0516
PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0516: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
SQLiteManager confirm.php spaw_root Parameter Remote File Inclusion
The remote host is running SQLiteManager, a web-based application for managing SQLite databases. The version of SQLiteManager installed on the remote host fails to sanitize user-supplied input to the 'spawroot' parameter of the 'spaw/dialogs/confirm.php' script before using it to include PHP code...