150 matches found
CVE-2005-2045: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL commands via the 1 iChannel parameter to default.asp, 2 iData parameter to detail.asp, 3 iMem parameter to members.asp, 4 iCat parameter to cat.asp, 5 offset parameter to...
CVE-2005-2049: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 iState parameter to default.asp or 2 iPro parameter to edit.asp...
CVE-2005-2048: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the 1 iMsg parameter to messages.asp, iFor parameter to 2 post.asp or 3 forums.asp, or 4 id parameter to userEdit.asp. NOTE: vectors 1 and 3 were...
CVE-2005-2047: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DUware DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 iCat parameter to cat.asp, 2 iPro parameter to detail.asp, 3 iSub parameter to sub.asp, 4 iCat parameter to catEdit.asp...
DUware DUforum 3.0/3.1 - 'forums.asp?iFor' SQL Injection
source: https://www.securityfocus.com/bid/14035/info DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application, access...
DUware DUpaypal 3.0/3.1 - 'detail.asp?iPro' SQL Injection
source: https://www.securityfocus.com/bid/14034/info DUpaypal Pro is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...
DUware DUpaypal 3.0/3.1 - 'sub.asp?iSub' SQL Injection
source: https://www.securityfocus.com/bid/14034/info DUpaypal Pro is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...
DUware DUamazon Pro 3.0/3.1 - 'productEdit.asp?iCat' SQL Injection
source: https://www.securityfocus.com/bid/14033/info DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise ...
DUware DUamazon Pro 3.0/3.1 - 'detail.asp?iSub' SQL Injection
source: https://www.securityfocus.com/bid/14033/info DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise ...
duportal1.txt
Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: Very High Title: DUportal Pro 3.4 has MANY S...
duportal2.txt
This is a multi-part message in MIME format. ------=NextPart000000801C545EE.4A553BC0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable =20 Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Ge...
CVE-2005-1224
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the 1 nChannel parameter to default.asp, cat.asp, or detail.asp, 2 the iChannel parameter to search.asp, default.asp, result.asp, cat.asp, or detail.asp 3 the iCat...
CVE-2005-1236
Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via the 1 iChannel parameter to channel.asp or search.asp, 2 iData parameter to detail.asp or incrating.asp, 3 iCat parameter to detail.asp or type.asp, 4 DATPARE...
CVE-2005-1236
CVE-2005-1236 affects DUportal DUportal 3.1.2 (and related 3.1.2 SQL) with multiple SQL injection vectors (iChannel to channel.asp/search.asp; iData to detail.asp/inc_rating.asp; iCat to detail.asp/type.asp; DAT_PARENT to inc_poll_voting.asp; iRate to inc_rating.asp). Root cause: improper input h...
CVE-2005-1236
Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via the 1 iChannel parameter to channel.asp or search.asp, 2 iData parameter to detail.asp or incrating.asp, 3 iCat parameter to detail.asp or type.asp, 4 DATPARE...
CVE-2005-1236: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrary SQL commands via the 1 iChannel parameter to channel.asp or search.asp, 2 iData parameter to detail.asp or incrating.asp, 3 iCat parameter to detail.asp or type.asp, 4 DATPARE...
CVE-2005-1224
DUportal/DUportal Pro (versions 3.4; 3.1.2 and 3.1.2 SQL) are affected by multiple SQL injection vulnerabilities. The flaws allow remote attackers to inject arbitrary SQL via parameters such as nChannel, iChannel, iData, iCat, POL_ID/POL_PARENT/POL_CATEGORY/CHA_NAME/CHA_ID, and tfm_order/tfm_orde...
CVE-2005-1224
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the 1 nChannel parameter to default.asp, cat.asp, or detail.asp, 2 the iChannel parameter to search.asp, default.asp, result.asp, cat.asp, or detail.asp 3 the iCat...
CVE-2005-1224: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the 1 nChannel parameter to default.asp, cat.asp, or detail.asp, 2 the iChannel parameter to search.asp, default.asp, result.asp, cat.asp, or detail.asp 3 the iCat...