CVE-2006-6095: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands via the 1 articleID parameter to activenewsview.asp or the 2 page parameter to default.asp. NOTE: the activeNewscategories.asp and activeNewscomments.asp vectors are already cover...

CVE-2006-6030

Multiple SQL injection vulnerabilities in E-Calendar Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 passwd Password fields in a admin/default.asp; or the 3 Event Title, 4 Location, or 5 Description field when making a search engine query in b search.asp...

CVE-2006-6030

Multiple SQL injection vulnerabilities affect E-Calendar Pro 3.0. Remote attackers can execute arbitrary SQL via (1) username and (2) passwd fields in admin/default.asp or (3) Event Title, (4) Location, or (5) Description in search.asp, as described for CVE-2006-6030. The underlying issue is impr...

CVE-2006-6030: Undefined Security Weakness

Multiple SQL injection vulnerabilities in E-Calendar Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 passwd Password fields in a admin/default.asp; or the 3 Event Title, 4 Location, or 5 Description field when making a search engine query in b search.asp...

CVE-2006-5987: Undefined Security Weakness

SQL injection vulnerability in default.asp in ASPintranet, possibly 1.2, allows remote attackers to execute arbitrary SQL commands via the a parameter...

CVE-2006-5952: Undefined Security Weakness

SQL injection vulnerability in admin/default.asp in ASP Smiley 1.0 allows remote attackers to execute arbitrary SQL commands via the Username field...

CVE-2006-5934: Undefined Security Weakness

SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the UserName field...

ASP Smiley 1.0 (default.asp) Login ByPass SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== ASP Smiley 1.0 default.asp Login ByPass SQL Injection Vulnerability ===================================================================== Title : ASP Smiley v1.0...

Estate Agent Manager <= v1.3 (default.asp) Remote Login ByPass SQL Injection Vulnerability

Title : Estate Agent Manager = v1.3 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0 from admin """"""""""""""""""""" ajann,Turkey ... Im not Hacker!...

Estate Agent Manager <= v1.3 (default.asp) Login Bypass Vulnerability

No description provided by source. Title : Estate Agent Manager = v1.3 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0 from admin """"""""""""""""""""" ajann,Turkey ... Im not Hacker!...

ASP Smiley 1.0 - default.asp Authentication Bypass SQL Injection

ASP Smiley 1.0 - default.asp Authentication Bypass SQL Injection Title : ASP Smiley v1.0 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0,0,0,0,0,0,0 from categories """"""""""""""""""""" ajann,Turkey ... Im...

Estate Agent Manager 1.3 - default.asp Authentication Bypass

Estate Agent Manager 1.3 - default.asp Authentication Bypass Title : Estate Agent Manager = v1.3 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0 from admin """"""""""""""""""""" ajann,Turkey ... Im not...

CVE-2006-5797

Multiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary SQL commands via the 1 nav, 2 s, or 3 print parameters...

CVE-2006-5800

The CVE-2006-5800 entry describes a cross-site scripting (XSS) vulnerability in the default.asp page of the xenis.creator CMS. The issue arises when an attacker can supply a crafted value for the nav parameter, enabling the injection of arbitrary web script or HTML. The available data indicate im...

CVE-2006-5799

Multiple cross-site scripting XSS vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the 1 contid or 2 search parameters...

CVE-2006-5798

SQL injection vulnerability in default.asp in Xenis.creator CMS allows remote attackers to execute arbitrary SQL commands via the contid parameter...

CVE-2006-5800: Undefined Security Weakness

Cross-site scripting XSS vulnerability in default.asp in xenis.creator CMS allows remote attackers to inject arbitrary web script or HTML via the nav parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-5797: Undefined Security Weakness

Multiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary SQL commands via the 1 nav, 2 s, or 3 print parameters...

CVE-2006-5799: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the 1 contid or 2 search parameters...

CVE-2006-5798: Undefined Security Weakness

SQL injection vulnerability in default.asp in Xenis.creator CMS allows remote attackers to execute arbitrary SQL commands via the contid parameter...