84 matches found
AdMan Standalone Ad Server XSS / SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================================ AdMan Standalone Ad Server XSS / SQL Injection Vulnerability ============================================================...
OpenX Source Detection
The remote host is running OpenX Source previously known as Openads, an open source ad server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid43863; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"OpenX...
XUL scripts bypass content-policy checks — Mozilla
Mozilla add-on developer and community member Wladimir Palant reported that content-loading policies were not checked before loading external script files into XUL documents. The severity of this problem would depend on the reasons behind the content policy check, which include privacy from "web...
OpenX 2.6.4 multiple vulnerabilities
OpenX multiple vulnerabilities An advisory by EnableSecurity in collaboration with Acunetix. Advisory URL: http://resources.enablesecurity.com/advisories/openx-2.6.4-multiple.txt Version: OpenX 2.6.4 and older versions Description: OpenX is an online advertising web application written in PHP tha...
Sql injection
SQL injection vulnerability in logonprocess.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the 1 username uname parameter and 2 password pass parameter. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...
CVE-2008-6364
SQL injection vulnerability in logonprocess.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the 1 username uname parameter and 2 password pass parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-6365
SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...
Sql injection
SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...
CVE-2008-6366
SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...
CVE-2008-6365
CVE-2008-6365 describes a SQL injection vulnerability in Ad Server Solutions’ Ad Management Software (Java) affecting logon.jsp and related logon_processing.jsp. The issue can allow remote attackers to modify/execute SQL via the uname/pass parameters. Root cause per description is improper handli...
CVE-2008-6364
SQL injection vulnerability in logonprocess.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the 1 username uname parameter and 2 password pass parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-6364
CVE-2008-6364 describes an SQL injection in logon_process.jsp of Ad Server Solutions Banner Exchange Solution Java. The vulnerability allows remote attackers to execute arbitrary SQL commands via the uname and pass parameters, potentially impacting confidentiality, integrity, and availability. Re...
CVE-2008-6366
SQL injection vulnerability CVE-2008-6366 affects Ad Server Solutions Affiliate Software Java 4.0: the logon.jsp page (and related logon_process.jsp) processes user inputs for username and password in a way that allows arbitrary SQL execution. This is exploitable remotely and could lead to data d...
CVE-2008-6366
SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...
CVE-2008-6365
SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...
Multiple Ad Server Solutions Products - 'logon_processing.jsp' SQL Injection
source: https://www.securityfocus.com/bid/32782/info Multiple Ad Server Solutions products are prone to SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...
Multiple Ad Server Solutions Products - logon_processing.jsp SQL Injection
Multiple Ad Server Solutions Products - logonprocessing.jsp SQL Injection source: https://www.securityfocus.com/bid/32782/info Multiple Ad Server Solutions products are prone to SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL...