EUVD-2006-1547

Malware in sbrugna...

EUVD-2006-1548

Malware in sbrugna...

EUVD-2006-1549

Malware in sbrugna...

VNews 1.2 - Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/17316/info VNews is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit coul...

[eVuln] VNews Multiple Vulnerabilities

New eVuln Advisory: VNews Multiple Vulnerabilities http://evuln.com/vulns/112/summary.html --------------------Summary---------------- eVuln ID: EV0112 CVE: CVE-2006-1543 CVE-2006-1544 CVE-2006-1545 Software: VNews Sowtware's Web Site: http://www.vscripts.pl/?id=vnews Versions: 1.2 Critical Level...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in news.php in vscripts aka Kuba Kunkiewicz VNews 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 autorkomentarza and 2 tresckomentarza parameters...

Sql injection

Multiple SQL injection vulnerabilities in vscripts aka Kuba Kunkiewicz VNews 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 loginvar parameter in a admin/admin.php, and the 2 news and 3 nom parameters in b news.php...

CVE-2006-1544

Multiple cross-site scripting XSS vulnerabilities in news.php in vscripts aka Kuba Kunkiewicz VNews 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 autorkomentarza and 2 tresckomentarza parameters...

CVE-2006-1543

Multiple SQL injection vulnerabilities in vscripts aka Kuba Kunkiewicz VNews 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 loginvar parameter in a admin/admin.php, and the 2 news and 3 nom parameters in b news.php...

Code injection

Direct static code injection vulnerability in admin/config.php in vscripts aka Kuba Kunkiewicz VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variables that are stored in admin/config.php...

CVE-2006-1545

Direct static code injection vulnerability in admin/config.php in vscripts aka Kuba Kunkiewicz VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variables that are stored in admin/config.php...

CVE-2006-1543

Multiple SQL injection vulnerabilities in vscripts aka Kuba Kunkiewicz VNews 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 loginvar parameter in a admin/admin.php, and the 2 news and 3 nom parameters in b news.php...

CVE-2006-1544

Multiple cross-site scripting XSS vulnerabilities in news.php in vscripts aka Kuba Kunkiewicz VNews 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 autorkomentarza and 2 tresckomentarza parameters...

CVE-2006-1543

VNews 1.2 (vscripts) is affected by multiple SQL injection vulnerabilities. The vulnerable inputs are loginvar in admin/admin.php and the news/nom parameters in news.php, where unsanitized user input is used in SQL queries. This can allow remote attackers to execute arbitrary SQL commands. A PoC/...

CVE-2006-1544

CVE-2006-1544 affects VNews 1.2 (vscripts) with multiple XSS flaws in news.php, exploitable via parameters autorkomentarza and tresckomentarza. The vulnerability allows remote attackers to inject arbitrary script/HTML. Exploitation: PoC/Exploit available per eVuln documentation. Affected software...

CVE-2006-1545

Direct static code injection vulnerability in admin/config.php in vscripts aka Kuba Kunkiewicz VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variables that are stored in admin/config.php...

CVE-2006-1545

The CVE-2006-1545 entry concerns VNews 1.2 (vscripts) where a Direct static code injection vulnerability in admin/config.php lets remote authenticated administrators execute code by inserting PHP into variables stored in admin/config.php. The issue arises in a vulnerable component/file (admin/con...

VNews 1.2 - Multiple SQL Injections

VNews 1.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/17316/info VNews is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

VNews 1.2 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/17316/info VNews is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise...

[SA19435] VNews Multiple Vulnerabilities

TITLE: VNews Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19435 VERIFY ADVISORY: http://secunia.com/advisories/19435/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data, System access WHERE: From remote SOFTWARE: VNews 1.x http://secunia.com/product/9043/...