EUVD-2006-1086

Malware in sbrugna...

open-spaces.com XSS vulnerability

Vulnerable URL: http://www.open-spaces.com/tellafriend.php?pageurl=article-v1n3-zimring.php=...

CubeCart 2.0.x tellafriend.php product Variable Path Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/13050/info CubeCart is reported prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. These issues...

phpArcadeScript 2.0 tellafriend.php gamename Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16957/info phpArcadeScript is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary...

Daily Inspirational Quotes Script - SQL Injection

Daily Inspirational Quotes Script - SQL Injection :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Daily Inspirational Quotes Script SQL Injection Vulnerability Author = Valentin Hoebel Contact = [email protected]...

CVE-2009-2785: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...

CVE-2006-1082: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the gamename parameter in tellafriend.php, 2 the loginstatus parameter in loginbox.php, 3 the submissionstatus parameter in index.php, the 4...

phpArcadeScript 2.0 tellafriend.php gamename Parameter XSS

phpArcadeScript 2.0 tellafriend.php gamename Parameter XSS. CVE-2006-1082. Webapps exploit for php platform source: http://www.securityfocus.com/bid/16957/info phpArcadeScript is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of...

CVE-2005-1033: Undefined Security Weakness

CubeCart 2.0.6 allows remote attackers to obtain sensitive information via an invalid 1 language parameter to index.php, 2 PHPSESSID parameter to index.php, 3 product parameter to tellafriend.php, 4 add parameter to viewcart.php, or 5 product parameter to viewproduct.php, which reveals the path i...

CubeCart <= 2.0.6 Multiple SQL Injections

The installed version of CubeCart on the remote host suffers from multiple SQL injection vulnerabilities due to its failure to sanitize user input via the 'PHPSESSID' parameter of the 'index.php' script, the 'product' parameter of the 'tellafriend.php' script, the 'add' parameter of the...

CubeCart 2.0.x - 'index.php' Multiple Full Path Disclosures

source: https://www.securityfocus.com/bid/13050/info CubeCart is reported prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. These issues affect the 'index.php',...