B2B Horizontal Marketplace Creator 2.0 SQL Injection

--------------------------------------------------------- Portal Name: B2B Horizontal Marketplace Creator Version: 2.0 Vendor: http://www.etoshop.com Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir Vulnerability : Auth Bypass SQL Injection Vulnerability...

Sql injection

Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the user parameter aka UserName field or 2 the pass parameter aka Pass field to a admin/admin.asp or b the default URI under admin/. NOTE: some of these detai...

CVE-2009-0447

Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the user parameter aka UserName field or 2 the pass parameter aka Pass field to a admin/admin.asp or b the default URI under admin/. NOTE: some of these detai...

Sql injection

Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 hitcounter.asp, 2 userdelete.asp, and 3 userupdate.asp; 4 the userid parameter to adminlogin.asp aka the USERNAME field in admin.asp; and 5 the PassWord paramete...

Design/Logic Flaw

StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp...

CVE-2008-0843

StatCounteX 3.0 and 3.1 are affected by a vulnerability that allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp. The available sources corroborate the product/version and the existence of the flaw but do not provide detailed ro...

CVE-2008-0843

StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp...

CVE-2008-0843: Undefined Security Weakness

StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp...

StatCounteX 3.0 & 3.1 Admin Vulnerability

StatCounteX 3.0 & 3.1 Admin Vulnerability No need to exploit ; An attacker can follow /admin.asp link and edit the scripts configurations google dork : intitle:StatCounteX 3.1 Yцnetici SekoMirza From Turkiye !...

CVE-2006-6848

The CVE-2006-6848 entry describes an SQL injection in ASPTicker 1.0, exploiting admin.asp via PATH_INFO (possibly related to the Password parameter) to allow remote execution of arbitrary SQL. This conveys a remote, unauthenticated risk with potential data exposure or modification. No remediation...

CVE-2006-6848: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin.asp in ASPTicker 1.0 allows remote attackers to execute arbitrary SQL commands via the PATHINFO, possibly related to the Password parameter...

CVE-2006-6828: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the grup parameter in admin.asp, or the id parameter in 2 default.asp or 3 admin.asp. NOTE: The provenance of this information is unknown; the details are obtained...

ASPTicker 1.0 (admin.asp) Login ByPass SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== ASPTicker 1.0 admin.asp Login ByPass SQL Injection Vulnerability ================================================================== Title : ASPTicker 1.0 admin.asp Remote...

ASPTicker 1.0 (admin.asp) Login ByPass SQL Injection Vulnerability

No description provided by source. Title : ASPTicker 1.0 admin.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.aspapps.com $$ : $ 17.00 SQL--------------------------------------------------------- http://target/path//admin.aspByPass Example:...

CVE-2006-0832

Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the 1 uid and 2 pwd parameter...

CVE-2006-0832

The CVE-2006-0832 entry describes SQL injection vulnerabilities in WPC.easy’s admin.asp, allowing remote attackers to execute arbitrary SQL commands through the uid and pwd parameters. The provided data identifies the vulnerable component (admin.asp in WPC.easy) and the vulnerable inputs, but doe...

CVE-2006-0832: Undefined Security Weakness

Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the 1 uid and 2 pwd parameter...

CVE-2006-0832

Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the 1 uid and 2 pwd parameter...

CVE-2005-2062

CVE-2005-2062 affects ActiveBuyAndSell 6.2. Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via the catid parameter to (1) default.asp or (2) buyersend.asp, (3) Administrator ID field in admin.asp, E-mail field in (4) advertiserstart.asp or (5) buye...

CVE-2005-2062: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands via the catid parameter to 1 default.asp or 2 buyersend.asp, 3 Administrator ID field in admin.asp, E-mail field in 4 advertiserstart.asp or 5 buyer.asp, or Keyword field in...