Adobe Acrobat AcroPDF ActiveX control fails to properly handle malformed input

Overview The Adobe Acrobat AcroPDF ActiveX control fails to properly handle malformed input to its methods. This could allow an attacker to cause the application using the ActiveX control to crash. Description Adobe Acrobat and Adobe Reader provide an ActiveX control to allow applications such as...

CVE-2006-6092

Multiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote attackers to execute arbitrary SQL commands via the 1 vehicleID, 2 categoryIDlist, 3 saletype, 4 stocknumber, 5 manufacturer, 6 model, 7 vehicleID, 8 year, 9 vin, and 10 listingprice parameters...

CVE-2006-6092

The CVE-2006-6092 entries describe SQL injection vulnerabilities in the 20/20 Auto Gallery vehiclelistings.asp page. Affected component: vehiclelistings.asp in 20/20 Auto Gallery. Root cause: vulnerable parameters (vehicleID, categoryID_list, sale_type, stock_number, manufacturer, model, year, vi...

CVE-2006-6092: Undefined Security Weakness

Multiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote attackers to execute arbitrary SQL commands via the 1 vehicleID, 2 categoryIDlist, 3 saletype, 4 stocknumber, 5 manufacturer, 6 model, 7 vehicleID, 8 year, 9 vin, and 10 listingprice parameters...

CVE-2006-6067

Multiple SQL injection vulnerabilities in 20/20 DataShed aka Real Estate Listing System allow remote attackers to execute arbitrary SQL commands via the 1 itemID parameter to a f-email.asp, or the 2 peopleID and 2 sortorder parameters to b listings.asp, different vectors than CVE-2006-5955...

CVE-2006-6067

CVE-2006-6067 describes SQL injection vulnerabilities in 20/20 DataShed (Real Estate Listing System). The affected components are listings.asp (itemID parameter) and f-email.asp (itemID) or listings.asp (peopleID and sort_order). Root cause is SQL command execution via these parameters, with vect...

CVE-2006-6067: Undefined Security Weakness

Multiple SQL injection vulnerabilities in 20/20 DataShed aka Real Estate Listing System allow remote attackers to execute arbitrary SQL commands via the 1 itemID parameter to a f-email.asp, or the 2 peopleID and 2 sortorder parameters to b listings.asp, different vectors than CVE-2006-5955...

20/20 auto gallery [ multiples injection sql ]

vendor site:http://www.2020autogallery.com/ product:20/20 auto gallery bug:injection sql global risk:high injection sql get : http://site.com/vehiclelistings.asp?vehicleID='sql http://site.com/vehiclelistings.asp?categoryIDlist='sql http://site.com/vehiclelistings.asp?saletype='sql...

20/20 datashed [ multiples injection sql ]

vendor site:http://www.2020applications.com/ product:20/20 datashed bug:injection sql risk:high injection sql get : /f-email.asp?strPeopleID=1&itemID='sql /listings.asp?peopleID='sql /listings.asp?sortorder='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...

CVE-2006-5955

SQL injection vulnerability in listings.asp in 20/20 DataShed aka Real Estate Listing System allows remote attackers to execute arbitrary SQL commands via the itemID parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-5955

Affected software: 20/20 DataShed (Real Estate Listing System). Vulnerable component: listings.asp (CVE-2006-5955) with vulnerability exposed via the itemID parameter, enabling SQL commands to be executed remotely. Related entry CVE-2006-6067 documents additional vectors (itemID to f-email.asp an...

CVE-2006-5955: Undefined Security Weakness

SQL injection vulnerability in listings.asp in 20/20 DataShed aka Real Estate Listing System allows remote attackers to execute arbitrary SQL commands via the itemID parameter. NOTE: some of these details are obtained from third party information...

20/20 Applications Data Shed 1.0 - 'listings.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/21156/info 20/20 DataShed is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, acces...

Solaris 7 (i386) : 104469-20

The remote host is missing Sun Security Patch number 104469-20 Solstice AdminSuite 2.3x86/AutoClient 2.1x86: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 07:35:39 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 5.6 (x86) : 105586-20

TotalNET Advanced Server 5.0x86: patch. Date this patch was last updated by Sun : Jul/27/99 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.7 (sparc) : 109209-20

Sun Cluster 2.2: Framework/Comm Patch. Date this patch was last updated by Sun : Feb/13/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 8 (sparc) : 116286-20

Sun One Application Server 7.0: Unbundled Core Patch. Date this patch was last updated by Sun : May/23/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 116286-20

Sun One Application Server 7.0: Unbundled Core Patch. Date this patch was last updated by Sun : May/23/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (x86) : 116299-20

Sun One Application Server 7.0x86: Java API for XML Parsing 1.2 P. Date this patch was last updated by Sun : May/23/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (x86) : 116287-20

Sun One Application Server 7.0x86: Unbundled Core Patch. Date this patch was last updated by Sun : May/23/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...