CVE-2008-3948

SQL injection vulnerability in admin/users/self-2.php in XRMS allows remote attackers to execute arbitrary SQL commands and modify name and email fields via unspecified vectors...

CVE-2008-3948

SQL injection vulnerability in admin/users/self-2.php in XRMS allows remote attackers to execute arbitrary SQL commands and modify name and email fields via unspecified vectors...

CVE-2008-3948

CVE-2008-3948: SQL injection in XRMS, affecting admin/users/self-2.php. Remote attackers can execute arbitrary SQL and modify name/email via unspecified vectors. No explicit remediation details provided in the documents; exploitation details not documented.

vastal-itechcosmetics.txt

Vastal I-Tech Cosmetics Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/cosmetics-zone-a-shopping-cart-for-your-cosmetics-shop-online.html Demo : http://www.vastal.com/cosmeticszone/ Exploit:...

Vastal I-Tech Cosmetics Zone (cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Vastal I-Tech Cosmetics Zone catid SQL Injection Vulnerability ================================================================= Vastal I-Tech Cosmetics Zone SQL Injection...

Vastal I-Tech Jobs Zone (news_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Vastal I-Tech Jobs Zone newsid SQL Injection Vulnerability ============================================================= Vastal I-Tech Jobs Zone SQL Injection Vulnerability Auth...

Vastal I-Tech Jobs Zone (news_id) SQL Injection Vulnerability

No description provided by source. Vastal I-Tech Jobs Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/jobs-zone-classifieds-script.html Demo : http://www.vastal.com/jobs/ Exploit:...

Vastal I-Tech Jobs Zone - news_id SQL Injection

Vastal I-Tech Jobs Zone - newsid SQL Injection Vastal I-Tech Jobs Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/jobs-zone-classifieds-script.html Demo : http://www.vastal.com/jobs/ Exploit:...

Vastal I-Tech Cosmetics Zone - cat_id SQL Injection

Vastal I-Tech Cosmetics Zone - catid SQL Injection Vastal I-Tech Cosmetics Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/cosmetics-zone-a-shopping-cart-for-your-cosmetics-shop-online.html Demo : http://www.vastal.com/cosmeticszone/ Exploit:...

CVE-2008-3948: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/users/self-2.php in XRMS allows remote attackers to execute arbitrary SQL commands and modify name and email fields via unspecified vectors...

Vastal I-Tech Cosmetics Zone - 'cat_id' SQL Injection

Vastal I-Tech Cosmetics Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/cosmetics-zone-a-shopping-cart-for-your-cosmetics-shop-online.html Demo : http://www.vastal.com/cosmeticszone/ Exploit:...

phpAuction 3.2.1 - 'item.php' SQL Injection

phpauction-gpl Version3.2 Version SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = = ======================================================== HomE scrip...

CVE-2008-2756

Cross-site scripting XSS vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter and other unspecified parameters. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter and other unspecified parameters. NOTE: some of these details are obtained from third party information...

roomphplanning15-user.txt

RoomPHPlanning v1.5 remote Arbitrary Add Admin Users Vulnerability + Script download :http://www.beaussier.com/roomphplanning/telecharge.php + Founded by : Stack + Greetz : All friends & muslims HaCkeRs... DESCRIPTION: RoomPHPlanning is vulnerable to add user whit go to link see down in colon Nom...

Minigal 2 critical XSS

Title: Minigal 2 critical XSS Author: Jose Carlos Norte [email protected] Date: 4-3-2008 Severity: high Vendor URL: http://www.minigal.dk/ ------- Introduction Minigal 2a.k.a. MG2 is a picture album written in PHP, it have a simple administration panels, and makes non-ajax browsable albums. -------...

CVE-2008-1129

Cross-site scripting XSS vulnerability in admin/users/self.php in XRMS CRM allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1129: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/users/self.php in XRMS CRM allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information...

ProCheckUp Security Advisory 2006.12

PR06-12: XSS on BEA Plumtree Foundation and AquaLogic Interaction portals Description: BEA Plumtree Foundation portal 6.0 and BEA AquaLogic Interaction 6.1 are vulnerable to a XSS vulnerability affecting the 'name' parameter which is submitted to the '/portal/server.pt' server-side script. Date...

Debian: Security Advisory (DSA-1066-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...