EUVD-2008-2896

Malware in sbrugna...

CVE-2018-15677: Improper Neutralization of Input During Web Page Generation

The newsfeed aka /index.php?page=viewnews in BTITeam XBTIT 2.5.4 has stored XSS via the title of a news item. This is also exploitable via CSRF...

PT-2018-13135

Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4 Description The issue concerns a stored XSS exploit via the title of a news item in the newsfeed, accessible through the API endpoint "/index.php?page=viewnews". This exploit is also possible through CSRF...

AWBS <= 2.7.1 (news.php viewnews) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability AWBS Versions 2.3.3 - v2.5.0 - v2.6.3 - 2.7.0 - V2.7.1 news.php viewnews AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : AWBS Versions : 2.3.3 - v2.5.0 - v2.6...

Milonic News (viewnews) SQL Injection Vulnerability

No description provided by source. ============================================================================= +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ----------------------------------------------------------------------------- + Title : Milonic News...

CVE-2010-2911: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a viewnews action...

Milonic News - 'viewnews' SQL Injection

============================================================================= +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ----------------------------------------------------------------------------- + Title : Milonic News viewnews SQL Injection Vulnerability +...

Milonic News - viewnews SQL Injection

Milonic News - viewnews SQL Injection ============================================================================= +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ----------------------------------------------------------------------------- + Title : Milonic News...

Sql injection

SQL injection vulnerability in news.php in Advanced Webhost Billing System AWBS 2.3.3 through 2.7.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter...

CVE-2008-2903: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in Advanced Webhost Billing System AWBS 2.3.3 through 2.7.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter...

AWBS &lt;= 2.7.1 (news.php viewnews) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability AWBS Versions 2.3.3 - v2.5.0 - v2.6.3 - 2.7.0 - V2.7.1 news.php viewnews AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : AWBS Versions : 2.3.3 - v2.5.0 - v2.6...

AWBS <= 2.7.1 (news.php viewnews) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== AWBS MD5...

CVE-2006-7190: Undefined Security Weakness

Cross-site scripting XSS vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP before 20060515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the viewnews function, related to use of doubbctopic instead of doubbc...

CVE-2002-0921: Undefined Security Weakness

CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an invalid database, which leaks the information in error messages...