OSVDB: Open Sourced Vulnerability Database

Creditee: Abysssec

Known Contact Information:

None at this time

Known Affiliations:

Abysssec Security and Vulnerability Research (as of 2010-09-04)

Disclosed Vulnerabilities (13):

Disc. Date	OSVDB ID	CVEID	Title
2010-10-21	68803	2010-3653	Adobe Shockwave Player Director Module Video File rcsL chunk Memory Corruption
2010-09-17	68058		phpmyfamily inc/passwdform.inc.php reason Parameter XSS
2010-09-17	68057		phpmyfamily mail.php referer Parameter XSS
2010-09-17	68056		phpmyfamily track.php person Parameter XSS
2010-09-17	68055		phpmyfamily Multiple Unspecified Admin Function CSRF
2010-09-17	68054		phpmyfamily my.php pwdEmail Parameter SQL Injection
2010-09-17	68053		phpmyfamily track.php email Parameter SQL Injection
2010-09-17	68052		phpmyfamily passthru.php transcript Parameter SQL Injection
2010-09-17	68051		phpmyfamily passthru.php transcript Parameter Traversal Arbitrary File Deletion
2010-09-16	68059	2010-3602	mojoPortal ProfileView.aspx User ID Parameter XSS
2010-09-16	68060	2010-3603	mojoPortal Services/FileService.ashx Multiple Admin Function CSRF
2010-09-15	68073	2010-3481	PHP MicroCMS index.php Multiple Parameter SQL Injection
2010-09-04	82682		SyndeoCMS starnet/index.php email Parameter XSS

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.