CVE-2005-1635

JGS-XA JGS-Portal 3.0.2 and earlier allows remote attackers to obtain the full server path via direct requests to 1 jgsportalref.php, 2 jgsportalland.php, 3 jgsportallog.php, 4 jgsportalglobalsponsor.php, 5 jgsportalglobal.php, 6 jgsportalsystem.php, 7 jgsportalviews.php; or multiple files in the...

CVE-2005-1634

Multiple cross-site scripting XSS vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 anzahlbeitraege parameter to jgsportal.php, 2 year parameter to jgsportalstatistik.php, 3 year parameter to jgsportalbeitraggraf.php, 4...

CVE-2005-1635

JGS-XA JGS-Portal 3.0.2 and earlier allows remote attackers to obtain the full server path via direct requests to 1 jgsportalref.php, 2 jgsportalland.php, 3 jgsportallog.php, 4 jgsportalglobalsponsor.php, 5 jgsportalglobal.php, 6 jgsportalsystem.php, 7 jgsportalviews.php; or multiple files in the...

[SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05)

SePro Bugtraq WBB Portal - JGS-Portal = 3.0.2 - Multiple Vulnerabilities 09.05.05 Vendor: JGS-XA URL: http://www.jgs-xa.de/ Version: = 3.0.2 Type: SQL-Injections, XSS and Full Path Disclosures Discovered by deluxe89 and the Security-Project Team Description: ------------------------- The JGS-Port...