CVE-2007-2880

Multiple cross-site scripting XSS vulnerabilities in Digirez 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Roomname parameter to room/infobook.asp or the 2 curYear parameter to room/week.asp...

CVE-2007-2880

Digirez 3.4 has multiple cross-site scripting (XSS) vulnerabilities that enable remote attackers to inject arbitrary web script or HTML via (1) the Room_name parameter in room/info_book.asp and (2) the curYear parameter in room/week.asp. Root cause: insufficient input sanitization leading to scri...

CVE-2007-2880

Multiple cross-site scripting XSS vulnerabilities in Digirez 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Roomname parameter to room/infobook.asp or the 2 curYear parameter to room/week.asp...

CVE-2007-2061

Cross-site scripting XSS vulnerability in checklogin.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2007-2061

The CVE-2007-2061 entry documents a Cross-site scripting (XSS) vulnerability in AfterLogic MailBee WebMail Pro 3.4, exploitable via the username parameter in check_login.asp. The affected component is a webmail login page; the underlying issue is reflected XSS allowing a remote attacker to inject...

Directory traversal

Directory traversal vulnerability in include/dbconn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote attackers to include and execute arbitrary local files via the root parameter...

CVE-2007-1031

Directory traversal vulnerability in include/dbconn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote attackers to include and execute arbitrary local files via the root parameter...

Vivvo Article Manager 3.4 (root) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== Vivvo Article Manager 3.4 root Local File Inclusion Vulnerability ===================================================================...

Sql injection

SQL injection vulnerability in infobook.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the bookid parameter...

CVE-2007-0128

SQL injection vulnerability in infobook.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the bookid parameter...

CVE-2007-0128

CVE-2007-0128 describes an SQL injection vulnerability in info_book.asp for Digirez 3.4 and earlier, where the book_id parameter can be manipulated to execute arbitrary SQL commands remotely. Affected software is Digirez (versions up to 3.4 and earlier); the underlying root cause is improper hand...

DigiRez <= 3.4 (book_id) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: DigiRez = V3.4 bookid Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.digiappz.com $$ : .269 .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

DigiRez 3.4 - book_id SQL Injection

DigiRez 3.4 - bookid SQL Injection !/usr/bin/perl Script Name: DigiRez : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

CVE-2006-6807

SQL injection vulnerability in list.asp in Softwebs Nepal aka Ananda Raj Pandey Ananda Real Estate 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the agent parameter...

Ananda Real Estate 3.4 - agent SQL Injection

Ananda Real Estate 3.4 - agent SQL Injection Title : Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//list.asp?agent=SQL...

aria-portal.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=63 ----------------------------------------------------------- Software: DuPortal Pro 3.4 Method: SQL Injection Vendor: http://duware.com PoC:...

[Aria-Security Team] DuWare DuPortal SQL Injection Vuln

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory: http://www.aria-security.com/forum/showthread.php?t=63 ----------------------------------------------------------- Software: DuPortal Pro 3.4 Method: SQL Injection Vendor:...

CVE-2006-6088

BlueCollar i-Gallery 3.4 is affected by multiple XSS vulnerabilities. A remote attacker can inject arbitrary scripts via the n or d parameters in igallery.asp, or via an unspecified parameter related to search (possibly the Search Gallery field) or the myquery parameter in search.asp. The notes i...

i-Gallery34.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/i-Gallery34.txt ----------------------------------------------------------- Software: i-Gallery 3.4 Method : Cross Site Scripting PoC: http://target/path/igallery.asp?n=XSS http://target/path/igallery.asp&d=XSS and...

i-Gallery 3.4 Cross Site Scripting

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://aria-security.net/advisory/i-Gallery34.txt ----------------------------------------------------------- Software: i-Gallery 3.4 Method : Cross Site Scripting PoC:...