EUVD-2010-4701

Malware in sbrugna...

EUVD-2007-5982

Malware in sbrugna...

Gatesoft Docusafe 4.1.0 - SQL Injection Vulnerability

No description provided by source. Author: R4dc0re Exploit Title: Gatesoft Docusafe Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://gatesoft.no/ Category:WebApp Version:4.1.0 Price:3500$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com,...

GateSoft Docusafe 'ECO.asp' SQL Injection Vulnerability

GateSoft Docusafe is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4736

SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the ECOID parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the ECOID parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4736

SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the ECOID parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4736

GateSoft DocuSafe 4.1.0 and 4.1.2 are affected by an SQL injection in ECO.asp, exploitable via the ECO_ID parameter. Multiple sources (NVD, OpenVAS) corroborate a vulnerability allowing remote execution of arbitrary SQL commands through that parameter. The underlying issue is a flaw in input hand...

CVE-2010-4736: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the ECOID parameter. NOTE: some of these details are obtained from third party information...

Gatesoft Docusafe Sql Injection Vulnerablity

Exploit for asp platform in category web applications ============================================ Gatesoft Docusafe Sql Injection Vulnerablity ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ ...

Gatesafe Docusafe 4.1.0 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3 //\ //\ Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail :...

Gatesoft Docusafe 4.1.0 - SQL Injection

Gatesoft Docusafe 4.1.0 - SQL Injection Author: R4dc0re Exploit Title: Gatesoft Docusafe Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://gatesoft.no/ Category:WebApp Version:4.1.0 Price:3500$ Contact: [email protected] Website: www.1337db.com Greetings to:...

Gatesoft Docusafe 4.1.0 - SQL Injection

Author: R4dc0re Exploit Title: Gatesoft Docusafe Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://gatesoft.no/ Category:WebApp Version:4.1.0 Price:3500$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects and to re...

DocuSafe Searc SQL注入漏洞

DocuSafe是一款基于PHP的WEB应用程序。 DocuSafe不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于搜索脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或可能操作数据库。 DocuSafe 目前没有解决方案提供： http://gartha.net...

CVE-2007-6012

SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the artnr parameter aka the search section. NOTE: some of these details are obtained from third party information...

CVE-2007-6012

CVE-2007-6012 is a SQL injection in DocuSafe 4.1.0 and 4.1.2, exploitable via the artnr parameter in SearchR.asp to execute arbitrary SQL commands. Affected component: SearchR.asp in DocuSafe; root cause is unsafely concatenated/artnr input. Impact described as remote attackers may run arbitrary ...

CVE-2007-6012

SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the artnr parameter aka the search section. NOTE: some of these details are obtained from third party information...

CVE-2007-6012: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SearchR.asp in DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary SQL commands via the artnr parameter aka the search section. NOTE: some of these details are obtained from third party information...

docusafe-sql.txt

DocuSafe "Search" SQL Injection Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://gartha.net Google Search: intitle:Corporate Contact System insert your command in the section "search" example: 'having 1=1-- Result: MicrosoftODB...

DocuSafe "Search" SQL Injection

DocuSafe "Search" SQL Injection Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://gartha.net Google Search: intitle:Corporate Contact System insert your command in the section "search" example: 'having 1=1-- Result: MicrosoftODB...