EUVD-2006-1614

Malware in sbrugna...

aWebNews <= 1.5 (visview.php) Remote File Include Vulnerability

No description provided by source. Credit : SpC-x mail : [email protected] SaVSaK.CoM | SpC-x - The-BeKiR | aWebNews 1.0 version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : aWebNews Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx Code : include ""...

aWebNews 1.5 - 'visview.php' Remote File Inclusion

Credit : SpC-x mail : [email protected] SaVSaK.CoM | SpC-x - The-BeKiR | aWebNews 1.0 version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : aWebNews Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx Code : include "" . $pathtonews . "config.php"; $db =...

aWebNews <= 1.5 (visview.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== aWebNews = 1.5 visview.php Remote File Include Vulnerability =============================================================== Credit : SpC-x mail : email protected SaVSaK.CoM |...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in visview.php in aWebNews 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 yname, 2 emailadd, 3 subject, and 4 comment parameters...

Sql injection

Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 user123 variable in a login.php or b fpass.php; or 2 cid parameter to c visview.php...

CVE-2006-1612

CVE-2006-1612 concerns aWebNews 1.0, where visview.php is vulnerable to multiple XSS flaws. Remote attackers can inject arbitrary script/HTML via the yname, emailadd, subject, and comment parameters due to inadequate input sanitization. Multiple sources (NVD, CVE records, and eVuln advisory) conf...

CVE-2006-1612

Multiple cross-site scripting XSS vulnerabilities in visview.php in aWebNews 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 yname, 2 emailadd, 3 subject, and 4 comment parameters...

aWebNews 1.2 - visview.php?_GET[cid] SQL Injection

aWebNews 1.2 - visview.php?GETcid SQL Injection source: https://www.securityfocus.com/bid/17352/info aWebBB is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to...