CVE-2006-1851

xFlow 5.46.11 and earlier allows remote attackers to determine the installation path of the application via the 1 action parameter to membersonly/index.cgi and 2 page parameter customerarea/index.cgi, probably due to invalid values...

CVE-2006-1850

CVE-2006-1850 affects xFlow 5.46.11 and earlier, with multiple XSS vulnerabilities allowing remote attackers to inject arbitrary script/HTML through parameters in members_only/index.cgi (level, position, id, action) and page in customer_area/index.cgi. The connected sources (NVD, CVE records, PRI...

CVE-2006-1851

CVE-2006-1851 affects xFlow 5.46.11 and earlier. The flaw allows remote attackers to determine the installation path via the action parameter in members_only/index.cgi and the page parameter in customer_area/index.cgi, likely due to invalid values. Exploitation details are not provided beyond thi...

CVE-2006-1851

xFlow 5.46.11 and earlier allows remote attackers to determine the installation path of the application via the 1 action parameter to membersonly/index.cgi and 2 page parameter customerarea/index.cgi, probably due to invalid values...

CVE-2006-1850

Multiple cross-site scripting XSS vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 level, 2 position, 3 id, and 4 action parameters to membersonly/index.cgi, and the 5 page parameter to customerarea/index.cgi...

CVE-2006-1849

Multiple SQL injection vulnerabilities in membersonly/index.cgi in xFlow 5.46.11 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 position and 2 id parameter...

CVE-2006-1849

The CVE-2006-1849 entry describes multiple SQL injection vulnerabilities in the web component members_only/index.cgi of xFlow (versions 5.46.11 and earlier). The underlying issue is improper handling of user-supplied input, allowing an attacker to manipulate SQL queries through the (1) position a...

xFlow 5.46.11 - 'index.cgi' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17614/info xFlow is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successfully...

xFlow 5.46.11 - index.cgi Multiple Cross-Site Scripting Vulnerabilities

xFlow 5.46.11 - index.cgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17614/info xFlow is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in...

xFlow 5.46.11 - index.cgi Multiple SQL Injections

xFlow 5.46.11 - index.cgi Multiple SQL Injections source: https://www.securityfocus.com/bid/17614/info xFlow is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to...

xFlow 5.46.11 - 'index.cgi' Multiple SQL Injections

source: https://www.securityfocus.com/bid/17614/info xFlow is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successfully...

xFlow v5.x multiple vuln.

xFlow v5.x multiple vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendorlink:http://www.skymarx.com/affiliatesoftware.html affected versions:v5.46.11 and previous orginal advisory: http://pridels.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html Product info: After over five years of...