EUVD-2006-4729

Malware in sbrugna...

EUVD-2006-3298

Malware in sbrugna...

CVE-2011-5074: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to hijack the authentication of administrators for requests that change administrator email, add a new administrator, or insert arbitrary script via 1 userprofileedit.p...

CVE-2009-3168: Missing Authorization

Mevin Productions Basic PHP Events Lister 2.0 does not properly restrict access to 1 admin/reset.php and 2 admin/useradd.php, which allows remote authenticated users to reset administrative passwords or add administrators via a direct request...

CVE-2006-4742

Cross-site scripting XSS vulnerability in useradd.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2006-4742

The CVE describes an XSS vulnerability in IDevSpot PhpLinkExchange 1.0, specifically in the file user_add.php where the msg parameter can be exploited to inject arbitrary web script or HTML. The vulnerability is cross-site scripting and could allow an attacker to execute script in the context of ...

CVE-2006-4742: Undefined Security Weakness

Cross-site scripting XSS vulnerability in useradd.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2006-3301: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in phpQLAdmin 2.2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the domain parameter in 1 useradd.php or 2 unitadd.php...