Sql injection

Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the pseudo parameter to login.php, 2 the id parameter to index.php in a carnet editer action in the MemberSpace espacemembre module, or 3 the typenav parameter to index.php in a...

CVE-2007-4956

Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the pseudo parameter to login.php, 2 the id parameter to index.php in a carnet editer action in the MemberSpace espacemembre module, or 3 the typenav parameter to index.php in a...

kwsstats-sql.txt

Script..........................: KwsPHP ver 1.0 stats Module Script Site..................: http://kws.koogar.org/ Vulnerability...............: Remote SQL injection Exploit Access.........................: Remote level.............................: Dangerous Author..........................: S4...

phpstats0192-xss.txt

I found a new xss in php-stats 0.1.9.2 http://phpstats.net/ http://www.example.com/php-stats-path/tracking.php?what=online&ip=XSS Stats must have public access for this difference from whois.php XSS...

Cross site scripting

Cross-site scripting XSS vulnerability in tracking.php in PHP-Stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the ip parameter in an online action, a different vector than CVE-2007-4334...

CVE-2007-4917

Cross-site scripting XSS vulnerability in tracking.php in PHP-Stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the ip parameter in an online action, a different vector than CVE-2007-4334...

CVE-2007-4917

CVE-2007-4917 is an XSS vulnerability in tracking.php of PHP-Stats 0.1.9.2. The issue allows remote attackers to inject arbitrary web script or HTML via the ip parameter in an online action, a vector distinct from CVE-2007-4334. The connected records corroborate the vulnerability’s existence in P...

new XSS vulnerability in php-stats -tracking.php

I found a new xss in php-stats 0.1.9.2 http://phpstats.net/ http://www.example.com/php-stats-path/tracking.php?what=online&ip=XSS Stats must have public access for this difference from whois.php XSS...

KwsPHP 1.0 stats Module Remote SQL Injection Exploit

No description provided by source. Script..........................: KwsPHP ver 1.0 stats Module Script Site..................: http://kws.koogar.org/ Vulnerability...............: Remote SQL injection Exploit Access.........................: Remote level.............................: Dangerous...

KwsPHP 1.0 stats Module - SQL Injection

KwsPHP 1.0 stats Module - SQL Injection Script..........................: KwsPHP ver 1.0 stats Module Script Site..................: http://kws.koogar.org/ Vulnerability...............: Remote SQL injection Exploit Access.........................: Remote level.............................:...

PHP-Stats 0.1.9.2 - 'Tracking.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25674/info Php-Stats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

PHP-Stats 0.1.9.2 - Tracking.php Cross-Site Scripting

PHP-Stats 0.1.9.2 - Tracking.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25674/info Php-Stats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

CVE-2007-4334

Cross-site scripting XSS vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the IP parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the IP parameter...

CVE-2007-4334

Cross-site scripting XSS vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the IP parameter...

CVE-2007-4334

The CVE-2007-4334 entry describes a cross-site scripting (XSS) vulnerability in Php-stats 0.1.9.2, specifically in whois.php. The underlying issue is an injection of arbitrary script/HTML via the IP parameter. This could allow an attacker to execute code in a victim’s browser when viewing the aff...

phpstats-xss.txt

I have found an xss in whois.php page of php-stats. http://phpstats.net/ Here is the XSS php-stats-path/whois.php?IP=%22%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E...

php-stats xss whois.php

I have found an xss in whois.php page of php-stats. http://phpstats.net/ Here is the XSS php-stats-path/whois.php?IP=223E3Cscript3Ealertdocument.cookie;3C/script3E...

PHP-Stats 0.1.9.2 - WhoIs.php Cross-Site Scripting

PHP-Stats 0.1.9.2 - WhoIs.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25275/info Php-Stats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...

PHP-Stats 0.1.9.2 - 'WhoIs.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25275/info Php-Stats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...