RSS   Vulnerabilities for 'Adman'   RSS

2007-07-26
 
CVE-2007-4020

 

 
Multiple cross-site scripting (XSS) vulnerabilities in login.php in AdMan 1.0.20051202 FF 3 patch and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user and (2) pwd parameters.

 
2006-03-23
 
CVE-2006-1375

 

 
AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a blank campaignId parameter to editCampaign.php and (2) a blank schemeId parameter to viewPricingScheme.php.

 
 
CVE-2006-1374

 

 
SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactions_offset parameter.

 

 >>> Vendor: Brain book software 2 Products
Adman
Software secure


Copyright 2024, cxsecurity.com

 

Back to Top