CVE-2008-2279

Freelance Auction Script 1.0 stores user passwords in plaintext in the tblusers table, which allows attackers to gain privileges by reading the table...

CVE-2008-2279

The CVE-2008-2279 entry concerns Freelance Auction Script 1.0 where user passwords are stored in plaintext in the tbl_users table, enabling attackers to read sensitive credentials and potentially gain privileges. The NVD entry provides a CVSS v2 base score of 5.0 (Medium) with network attack vect...

CVE-2008-2278: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a pdetails action...

CVE-2008-2279: Undefined Security Weakness

Freelance Auction Script 1.0 stores user passwords in plaintext in the tblusers table, which allows attackers to gain privileges by reading the table...

Freelance Auction Script 1.0 - browseproject.php SQL Injection

Freelance Auction Script 1.0 - browseproject.php SQL Injection --==+================================================================================+==-- --==+ Freelance Auction Script 1.0 browseproject.php SQL Injection Vulnerability +==--...

Freelance Auction Script 1.0 (browseproject.php) SQL Injection Vuln

No description provided by source. --==+================================================================================+==-- --==+ Freelance Auction Script 1.0 browseproject.php SQL Injection Vulnerability +==--...

Freelance Auction Script 1.0 - 'browseproject.php' SQL Injection

--==+================================================================================+==-- --==+ Freelance Auction Script 1.0 browseproject.php SQL Injection Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...

Freelance Auction Script 1.0 (browseproject.php) SQL Injection Vuln

Exploit for unknown platform in category web applications =================================================================== Freelance Auction Script 1.0 browseproject.php SQL Injection Vuln ===================================================================...

CVE-2007-4121

CVE-2007-4121 relates to multiple SQL injection flaws in admin.aspx across three scripts: E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script. The vulnerability allows remote attackers to inject SQL via the EmailAdd (Username) and Pass (password) parameters, po...

CVE-2007-4121: Undefined Security Weakness

Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the 1 EmailAdd Username and 2 Pass password parameters. NOTE: some of these details are...

E-commerceScripts ALL Apps (Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script) admin.aspx SQL

A R I A - S E C U R I T Y Vendor: http://www.e-commercescripts.com/dotnet/ E-commerceScripts ALL Apps Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script admin.aspx SQL Injection Username: anything' OR 'x'='x password: whatever you want or anything' OR 'x'='x Credits: Aria-Securit...