CVE-2007-4020

Multiple cross-site scripting XSS vulnerabilities in login.php in AdMan 1.0.20051202 FF 3 patch and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user and 2 pwd parameters...

CVE-2007-4020

CVE-2007-4020 involves multiple cross-site scripting (XSS) vulnerabilities in login.php of AdMan 1.0.20051202 FF 3 patch and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) user and (2) pwd parameters. Affected software is AdMan prior to newer patches...

CVE-2007-4020

Multiple cross-site scripting XSS vulnerabilities in login.php in AdMan 1.0.20051202 FF 3 patch and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user and 2 pwd parameters...

CVE-2007-4020: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in login.php in AdMan 1.0.20051202 FF 3 patch and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user and 2 pwd parameters...

2 Vuln.

Secure XSS vuln. Vuln. discovered by : r0t Date: 25 July 2007 vendor:http://www.formfields.com/secureArea/secureProduct.php orginal advisory: http://pridels-team.blogspot.com/2007/07/secure-xss-vuln.html affected versions:v1.0.20070629 and previous Secure contains a flaw that allows a remote...

Sql injection

SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionsoffset parameter...

Design/Logic Flaw

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via 1 a blank campaignId parameter to editCampaign.php and 2 a blank schemeId parameter to viewPricingScheme.php...

CVE-2006-1374

SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionsoffset parameter...

CVE-2006-1375

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via 1 a blank campaignId parameter to editCampaign.php and 2 a blank schemeId parameter to viewPricingScheme.php...

CVE-2006-1375

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via 1 a blank campaignId parameter to editCampaign.php and 2 a blank schemeId parameter to viewPricingScheme.php...

CVE-2006-1374

CVE-2006-1374 concerns an SQL injection in AdMan 1.0.20051221 and earlier. The vulnerability is in viewStatement.php via the transactions_offset parameter, allowing remote attackers to execute arbitrary SQL commands. Affected product: AdMan (version 1.0.20051221 and earlier). Root cause: unvalida...

CVE-2006-1375

CVE-2006-1375 affects AdMan 1.0.20051221 and earlier. The vulnerability allows remote attackers to obtain the full server path via (1) a blank campaignId parameter to editCampaign.php and (2) a blank schemeId parameter to viewPricingScheme.php. Affected components are the PHP scripts handling cam...

CVE-2006-1374

SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionsoffset parameter...

CVE-2006-1375: Undefined Security Weakness

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via 1 a blank campaignId parameter to editCampaign.php and 2 a blank schemeId parameter to viewPricingScheme.php...

CVE-2006-1374: Undefined Security Weakness

SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionsoffset parameter...

AdMan v1.0.x SQL vuln

AdMan v1.0.x SQL vuln Vuln. discovered by : r0t Date: 23 march 2006 vendor:www.formfields.com/adManArea/ affected versions: v1.0.20051221 and prior orginal advisory: http://pridels.blogspot.com/2006/03/adman-v10x-sql-vuln.html SQL vuln. AdMan contains a flaw that allows a remote sql injection...

AdMan 1.0.20051221 - ViewStatement.php SQL Injection

AdMan 1.0.20051221 - ViewStatement.php SQL Injection source: https://www.securityfocus.com/bid/17208/info AdMan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful...

AdMan 1.0.20051221 - 'ViewStatement.php' SQL Injection

source: https://www.securityfocus.com/bid/17208/info AdMan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...