CVE-2006-6480

CVE-2006-6480 affects AnnonceScriptHP 2.0. The vulnerability is in admin/admin_membre/fiche_membre.php, where the idmembre parameter allows remote attackers to obtain sensitive information, specifically passwords for arbitrary users. The provided sources confirm the affected component and the dat...

CVE-2006-6479

CVE-2006-6479 documents multiple XSS flaws in AnnonceScriptHP 2.0, allowing remote attackers to inject arbitrary script or HTML via the email parameter. Affected files are: erreurinscription.php, Templates/admin.dwt.php, Templates/commun.dwt.php, membre.dwt.php, and admin/admin_config/Aide.php. T...

CVE-2006-6478

CVE-2006-6478 describes multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0. The affected components are (a) email.php (id parameter), (b) voirannonce.php (no parameter), (c) admin/admin_membre/fiche_membre.php (idmembre), and (d) admin/admin_annonce/okvalannonce.php and (e) admin/admin...