42 matches found
EUVD-2005-3511
Malware in sbrugna...
EUVD-2005-4607
Malware in sbrugna...
EUVD-2005-4608
Malware in sbrugna...
EUVD-2006-6214
Malware in sbrugna...
EUVD-2006-6213
Malware in sbrugna...
EUVD-2006-0965
Malware in sbrugna...
EUVD-2005-3512
Malware in sbrugna...
VUBB Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15260/info VUBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script co...
CVE-2006-6230
SQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a register action to index.php, a different vulnerability than CVE-2006-0962...
CVE-2006-6231
vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.php, which leaks the path in an error message...
CVE-2006-6230
SQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a register action to index.php, a different vulnerability than CVE-2006-0962...
CVE-2006-6231
vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.php, which leaks the path in an error message...
CVE-2006-6231
CVE-2006-6231 affects vuBB 0.2.1 and earlier. A direct request to includes/vubb.php can cause an error message that leaks the server path, enabling information disclosure. The cited CVSS v2 base score is 5.0 (Medium) with network access and low attack complexity, and no integrity/availability imp...
CVE-2006-6230
The CVE-2006-6230 entry covers a SQL injection vulnerability in vuBB 0.2.1 and earlier. The issue is exploitable via the user parameter in a register action to index.php, allowing remote attackers to execute arbitrary SQL commands. Exact product version details: vuBB 0.2.1 and earlier. Root cause...
CVE-2006-6230
SQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a register action to index.php, a different vulnerability than CVE-2006-0962...
[SA19084] VUBB "pass" SQL Injection Vulnerability
TITLE: VUBB "pass" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19084 VERIFY ADVISORY: http://secunia.com/advisories/19084/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: VUBB 0.x http://secunia.com/product/8512/ DESCRIPTION: KingOfSKa has discovered...
Sql injection
SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie...
CVE-2006-0962
SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie...
CVE-2006-0962
CVE-2006-0962 describes an SQL injection in vuBB 0.2 where an attacker can inject via the pass parameter in a cookie, enabling remote SQL execution. The connected CVE-2006-6230 entry notes a separate but related vulnerability affecting vuBB 0.2.1 and earlier via the user parameter in a register a...
CVE-2006-0962
SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie...