CVE-2007-5425: Improper Control of Generation of Code

SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the questId parameter in a hideQuestion ToDo action. NOTE: the catId vector is already covered by CVE-2007-5131...

ActiveKB NX 2.6 - index.php Cross-Site Scripting

ActiveKB NX 2.6 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26027/info ActiveKB NX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

russian-multi.txt

Dear [email protected], Vulnerabilities reported by different Russian speaking authors to http://securityvulns.ru 1. ElektAntichat.ru reports protection bypass vulnerability in PHP 4 and 5. disablefunctions feature can be bypassed by using functions alias. A list of aliases is given in...

ActiveKB NX 2.6 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26027/info ActiveKB NX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

Sql injection

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected...

CVE-2007-5131

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected...

CVE-2007-5131

CVE-2007-5131 affects Interspire ActiveKB NX 2.x. The vulnerability is a SQL injection in index.php when handling the browse action via the catId parameter, enabling remote execution of arbitrary SQL commands. Note that ActiveKB 1.5 is also reported to be affected. The linked references confirm t...

CVE-2007-5131

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected...

CVE-2007-5131: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the catId parameter in a browse action. NOTE: it was separately reported that ActiveKB 1.5 is also affected...

ActiveKB Knowledgebase 2.? (catId) Remote SQL Injection Vulnerability

No description provided by source. ActiveKB NX 2.? Powered by ActiveKB Knowledgebase Software index.php SQL Injection Discovered by Luna-Tic and XTErner 19 Years Ukrainian Hackers Vendor:www.interspire.com/activekb/ License:sharewere Exploit:/kb/index.php?ToDo=browse&catId=SQL CODE...

ActiveKB KnowledgeBase 2.x - catId SQL Injection

ActiveKB KnowledgeBase 2.x - catId SQL Injection ActiveKB NX 2.? Powered by ActiveKB Knowledgebase Software index.php SQL Injection Discovered by Luna-Tic and XTErner 19 Years Ukrainian Hackers Vendor:www.interspire.com/activekb/ License:sharewere Exploit:/kb/index.php?ToDo=browse&catId=SQL CODE...

ActiveKB Knowledgebase 2.? (catId) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== ActiveKB Knowledgebase 2.? catId Remote SQL Injection Vulnerability ===================================================================== ActiveKB NX 2.? Powered by...

ActiveKB KnowledgeBase 2.x - 'catId' SQL Injection

ActiveKB NX 2.? Powered by ActiveKB Knowledgebase Software index.php SQL Injection Discovered by Luna-Tic and XTErner 19 Years Ukrainian Hackers Vendor:www.interspire.com/activekb/ License:sharewere Exploit:/kb/index.php?ToDo=browse&catId=SQL CODE...

XXS в ActiveKB NX 2.5.4

Здравствуйте, 3APA3A. Software: ActiveKB NX 2.5.4 Vendor: www.interspire.com Vulnerability: XXS Risk: низкий Date: 1.09.2007 discovered by durito damagelab -duritoatmaildotru- HTTP: durito.narod.ru +:| Details |: Удаленный атакующий может с помощью специально сформированного URL выполнить...

SQL-инъекция в ActiveKB v1.5

Здравствуйте, 3APA3A. Software: ActiveKB v1.5 Vendor: www.interspire.com Vulnerability: множественные SQL-инъекции Risk: средний Date: 27.08.2007 discovered by durito damagelab -duritoatmaildotru- HTTP: durito.narod.ru +:| Details |: SQL-инъекции +:| Экплойт |:...