CVE-2012-3822

Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials...

CVE-2012-3822

CVE-2012-3822 affects Arial Campaign Enterprise before v11.0.551. The vulnerability is an unauthorized access issue on the User-Edit.asp page that enables remote attackers to enumerate users’ credentials, i.e., information disclosure of credentials. The root cause is access to a user-edit interfa...

CVE-2012-3822: Incorrect Authorization

Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials...

PT-2020-7226

Name of the Vulnerable Software and Affected Versions Arial Campaign Enterprise versions prior to 11.0.551 Description The issue allows remote attackers to enumerate users' credentials due to unauthorized access to the User-Edit.asp page. Recommendations For versions prior to 11.0.551, update to...

PT-2014-2272

Name of the Vulnerable Software and Affected Versions Campaign Enterprise versions prior to 11.0.551 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the SerialNumber field to "activate.asp" or the UID field to "User-Edit.asp"...

CVE-2012-3820: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the 1 SerialNumber field to activate.asp or 2 UID field to User-Edit.asp...

Sql injection

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5297

CVE-2012-5297 is a SQL injection vulnerability in the edit.asp page of Mavili Guestbook, exploitable via the id parameter. The issue allows remote attackers to execute arbitrary SQL commands. The description states the flaw existed since November 2007. No specific affected versions, fixes, or rem...

CVE-2012-5297

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-5895

Name of the Vulnerable Software and Affected Versions Mavili Guestbook affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the id parameter to...

PT-2012-5898

Name of the Vulnerable Software and Affected Versions Mavili Guestbook version released in November 2007 Description The issue allows remote attackers to edit, delete, and approve arbitrary messages. This can be achieved by making a direct request to API endpoints such as "edit.asp", "delete.asp"...

PT-2012-5896

Name of the Vulnerable Software and Affected Versions Mavili Guestbook affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the "edit.asp" file. This enables attackers to manipulate the database by injecting...

CVE-2012-5297: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5296: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 approve.asp, 2 delete.asp, 3 edit.asp, or 4 edit2.asp...

CJWSoft ASPGuest GuestBook 'edit.asp' - SQL Injection Vulnerability

Title: CJWSoft ASPGuest GuestBook 'edit.asp' - SQL Injection Vulnerability Product : CJWSoft ASPGuest GuestBook Version : Free Version Vendor: http://www.cjwsoft.com/aspguest/default.asp Class: Input Validation Error CVE: Remote: Yes Local: No Published: 2012-02-24 Updated: Impact : Medium CVSSv2...

ASPGuest (edit.asp ID) Blind SQL Injection

Exploit for unknown platform in category web applications ========================================== ASPGuest edit.asp ID Blind SQL Injection ========================================== Err0r C0N50L3: www.target.com/path/admin/edit.asp?ID=EV!L blind sql EV!L BL!ND sql 7Ru3 : campaignEdit.asp?CCam=...

ASPGuest (edit.asp ID) Blind SQL Injection

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:edit.asp ID Blind SQL Injection Vulnerability Vendor: www.cjwsoft.com Software: ASPGuest free author: R3d-D3v!L Date: 17.dec.2009 T!ME: 3:03 am ? Home: WwW.xP10.ME ?...

ASPGuest - 'edit.asp?ID' Blind SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:edit.asp ID Blind SQL Injection Vulnerability Vendor: www.cjwsoft.com Software: ASPGuest free author: R3d-D3v!L Date: 17.dec.2009 T!ME: 3:03 am ? Home: WwW.xP10.ME ? contact: N/A ?...

DUWare DUgallery 3.0 - '/admin/edit.asp' Authentication Bypass

source: https://www.securityfocus.com/bid/36049/info DUgallery is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to gain unauthorized administrative access to the affected application. Successfully exploiting this issue will lead to other attacks. DUgallery 3....

CVE-2007-5291: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Edit.asp in DB Manager 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...