CVE-2008-5975

CVE-2008-5975 describes a SQL injection in Active Price Comparison 4.0, specifically in links.asp, exploitable via the linkid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Several connected sources corroborate the issue, including NVD/NVD mirrors and Expl...

CVE-2008-5973

The CVE-2008-5973 entry describes an SQL injection vulnerability in Active Web Mail 4.0 (login.aspx) that allows an attacker to execute arbitrary SQL commands via the password parameter. Affected component: login form handling in Active Web Mail 4.0. Root cause: improper sanitization of input lea...

Mandrake Security Advisory MDVSA-2009:016 (xen)

The remote host is missing an update to xen announced via advisory MDVSA-2009:016. OpenVAS Vulnerability Test $Id: mdksa2009016.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:016 xen Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1704-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1704 [email protected] http://www.debian.org/security/ Steffen Joeris January 14, 2009 http://www.debian.org/security/faq -...

CVE-2008-5886

The CVE-2008-5886 issue affects TAKempis Discussion Web 4.0, where sensitive information is stored under the web root with insufficient access control. An attacker can directly request the file _private/discussion.mdb to download a password-containing database, exposing credentials and sensitive ...

Debian DSA-1692-1 : php-xajax - insufficient input sanitising

It was discovered that php-xajax, a library to develop Ajax applications, did not sufficiently sanitise URLs, which allows attackers to perform cross-site scripting attacks by using malicious URLs. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

CVE-2008-5654

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter, a different vector than CVE-2008-1344. NOTE: some of these details are...

CVE-2008-5655

Multiple SQL injection vulnerabilities in MyioSoft EasyBookMarker 4.0 allow remote attackers to execute arbitrary SQL commands via the 1 deletefolder and 2 deletelink parameters to unspecified vectors, possibly to a plugins/bookmarker/bookmarkerbackend.php or b ajaxp.php, different vectors than...

Sql injection

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyBookMarker 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, as reachable through the username parameter, a different vector than CVE-2008-1344. NOTE: some of these details are...

CVE-2008-5655

Multiple SQL injection vulnerabilities in MyioSoft EasyBookMarker 4.0 allow remote attackers to execute arbitrary SQL commands via the 1 deletefolder and 2 deletelink parameters to unspecified vectors, possibly to a plugins/bookmarker/bookmarkerbackend.php or b ajaxp.php, different vectors than...

CVE-2008-5652

The CVE-2008-5652 entry concerns MyioSoft EasyBookMarker 4.0. Affected component: loginADP function in ajaxp.php. Root cause: SQL injection via the rsargs parameter, reachable through the username parameter, enabling remote SQL command execution. Exploit details in sources are provided, but expli...

CVE-2008-5654

Summary (CVE-2008-5654): SQL injection vulnerability in the loginADP function of ajaxp.php in MyioSoft EasyCalendar 4.0 (and earlier per related CVE-2008-1344) allows remote attackers to execute arbitrary SQL commands via the rsargs parameter, reachable through the username parameter. This is a d...

CVE-2008-5655

MyioSoft EasyBookMarker 4.0 is affected by CVE-2008-5655 and related CVE-2008-5654, with concrete details describing SQL injection in the loginADP function pathway. Specifically, both CVEs reference vulnerabilities in EasyCalendar/EasyBookMarker components where the parameters (1) delete_folder a...

CVE-2008-5651

Product/affected software: MyioSoft EasyBookMarker 4.0 (plugin: bookmarks/backend). Vulnerability: SQL injection in bookmarks_backend.php via the Parent parameter, enabling remote SQL execution. Root cause/impact: Improper input handling allows arbitrary SQL commands; CVSS v2 base score 7.5 (HIGH...

CVE-2008-5561

SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 ficheproduct.php and 2 presentation.php...

Sql injection

SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 ficheproduct.php and 2 presentation.php...

CVE-2008-5561

SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 ficheproduct.php and 2 presentation.php...

CVE-2008-5561

The connected documents confirm CVE-2008-5561 as a SQL injection vulnerability in Netref 4.0. The issue affects the application’s fiche_product.php and presentation.php endpoints, where an unsafely handled id parameter enables remote attackers to execute arbitrary SQL commands. Root cause cited i...

Discussion Web v4 Remote Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Discussion Web Version : 4.0 Vendor : http://www.takempis.com/aboutdiscussion.htm Author : PouyaServer , [email protected] Vulnerability : DD...