CVE-2009-2232

The CVE describes a SQL injection in Softbiz Banner Ad Management Script specifically in image.php, exploitable via the size_id parameter. The root cause is improper handling of the size_id input leading to arbitrary SQL execution by remote attackers. The available documents confirm the affected ...

CVE-2009-2232: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbitrary SQL commands via the sizeid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Online Ad Sales Open Door to Viruses

From The Wall Street Journal Emily Steel On a Saturday night at the end of May, visitors to the forums section of Digital Spy, a British entertainment and media news Web site, were greeted with an ad that loaded malicious software onto their computers. The Web site’s advertising system had been...

XUL scripts bypass content-policy checks — Mozilla

Mozilla add-on developer and community member Wladimir Palant reported that content-loading policies were not checked before loading external script files into XUL documents. The severity of this problem would depend on the reasons behind the content policy check, which include privacy from "web...

AdPeeps 8.5d1 XSS and HTML Injection Vulnerabilities

No description provided by source. AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads, rich-media/flash ads and text ads on your...

AdPeeps 8.5d1 Cross Site Scripting

AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads, rich-media/flash ads and text ads on your website. Built using PHP/MYSQL, Ad...

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads,...

FunkyASP Ad System 1.1 Shell Upload

FunkyASP AD System v1.1 Remote Shell Upload script: http://www.funkyasp.co.uk/cats.asp?id=1&currency=GBP ---------------------------------------------------------- Discovered By: ZoRLu Date: 04.04.2009 Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org contact:...

FunkyASP AD System 1.1 Remote Shell Upload Vulnerability

No description provided by source. FunkyASP AD System v1.1 Remote Shell Upload script: http://www.funkyasp.co.uk/cats.asp?id=1&currency=GBP ---------------------------------------------------------- Discovered By: ZoRLu Date: 04.04.2009 Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com...

FunkyASP AD System 1.1 - Arbitrary File Upload

FunkyASP AD System v1.1 Remote Shell Upload script: http://www.funkyasp.co.uk/cats.asp?id=1&currency=GBP ---------------------------------------------------------- Discovered By: ZoRLu Date: 04.04.2009 Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org contact:...

OpenX 2.6.4 multiple vulnerabilities

OpenX multiple vulnerabilities An advisory by EnableSecurity in collaboration with Acunetix. Advisory URL: http://resources.enablesecurity.com/advisories/openx-2.6.4-multiple.txt Version: OpenX 2.6.4 and older versions Description: OpenX is an online advertising web application written in PHP tha...

Sql injection

SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...

Sql injection

SQL injection vulnerability in logonprocess.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the 1 username uname parameter and 2 password pass parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...

CVE-2008-6365

SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...

CVE-2008-6366

SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...

CVE-2008-6364

SQL injection vulnerability in logonprocess.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the 1 username uname parameter and 2 password pass parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6364

CVE-2008-6364 describes an SQL injection in logon_process.jsp of Ad Server Solutions Banner Exchange Solution Java. The vulnerability allows remote attackers to execute arbitrary SQL commands via the uname and pass parameters, potentially impacting confidentiality, integrity, and availability. Re...

CVE-2008-6366

SQL injection vulnerability CVE-2008-6366 affects Ad Server Solutions Affiliate Software Java 4.0: the logon.jsp page (and related logon_process.jsp) processes user inputs for username and password in a way that allows arbitrary SQL execution. This is exploitable remotely and could lead to data d...

CVE-2008-6364

SQL injection vulnerability in logonprocess.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the 1 username uname parameter and 2 password pass parameter. NOTE: some of these details are obtained from third party information...