CVE-2007-4952: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a favorite op action, a different vector than CVE-2006-5917...

omnistar-sql.txt

/bin/bash Omnistar Article Manager Software article.php Remote SQL Injection Exploit Exploit Coded By : Cold z3ro http://Hackteach.org Exploit : /article.php?op=favorite&articleid=4&pageid=-1'//union//select//name,1//from//user/...

Omnistar Article Manager Software (article.php) SQL Injection Exploit

No description provided by source. /bin/bash Omnistar Article Manager Software article.php Remote SQL Injection Exploit &nb...

Omnistar Article Manager Software - article.php SQL Injection

Omnistar Article Manager Software - article.php SQL Injection /bin/bash Omnistar Article Manager Software article.php Remote SQL Injection Exploit Exploit Coded By : Cold z3ro http://Hackteach.org Exploit : /article.php?op=favorite&articleid=4&pageid=-1'//union//select//name,1//from//user/...

Omnistar Article Manager Software (article.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================================== Omnistar Article Manager Software article.php SQL Injection Exploit ===================================================================== /bin/bash Omnistar Article...

CVE-2007-4332

SQL injection vulnerability in article.php in Article Dashboard, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject arbitrary web script or HTML via the 1 femailaddress, 2 freemailaddress, and other unspecified parameters. NOTE: the provenance of this information is unknown; the details are...

Sql injection

SQL injection vulnerability in article.php in Article Dashboard, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-4333

Multiple cross-site scripting XSS vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject arbitrary web script or HTML via the 1 femailaddress, 2 freemailaddress, and other unspecified parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-4333

CVE-2007-4333 describes multiple cross-site scripting (XSS) vulnerabilities in signup.php of Article Dashboard. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters f_emailaddress, f_reemailaddress, and other unspecified fields. Connected sources corroborate...

CVE-2007-4333

Multiple cross-site scripting XSS vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject arbitrary web script or HTML via the 1 femailaddress, 2 freemailaddress, and other unspecified parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-4332

SQL injection vulnerability in article.php in Article Dashboard, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-4332

CVE-2007-4332 is a SQL injection vulnerability in Article Dashboard’s article.php. When magic_quotes_gpc is disabled, remote attackers can inject arbitrary SQL commands through the id parameter during a print action. The vulnerability is described across multiple sources (NVD/NVDB-derived and thi...

CVE-2007-4332: Undefined Security Weakness

SQL injection vulnerability in article.php in Article Dashboard, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-4333: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject arbitrary web script or HTML via the 1 femailaddress, 2 freemailaddress, and other unspecified parameters. NOTE: the provenance of this information is unknown; the details are...

Cross site scripting

Cross-site scripting XSS vulnerability in contactauthor.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2007-4082

Cross-site scripting XSS vulnerability in contactauthor.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2007-4082

CVE-2007-4082 describes a cross-site scripting (XSS) vulnerability in AlstraSoft Article Manager Pro, exploitable via theuserid parameter in contact_author.php. The issue allows remote attackers to inject arbitrary scripts/HTML; CVSS v2 base score 4.3 (Medium) with Network attack vector, no authe...

CVE-2007-4082

Cross-site scripting XSS vulnerability in contactauthor.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2007-4082: Undefined Security Weakness

Cross-site scripting XSS vulnerability in contactauthor.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script or HTML via the userid parameter...