CVE-2008-4144

SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action...

ACG-ScriptShop E-Gold Script Shop 'cid' SQL注入漏洞

BUGTRAQ ID: 31015 CNCAN ID：CNCAN-2008090501 ACG-ScriptShop E-Gold Script Shop是一款基于PHP的WEB应用程序。 ACG-ScriptShop E-Gold Script Shop不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于脚本对用户提交给'cid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 DiscountedScripts ACG-ScriptShop E-Gold Script Shop...

Unfixed XSS vulnerability at www.arcadepimps.com

Security researcher GoLd, has submitted on 19/08/2008 a cross-site-scripting XSS vulnerability affecting www.arcadepimps.com, which at the time of submission ranked 14155275 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/09/2009. It is...

Sql injection

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via 1 the sellerid parameter in sellersothersitem.php, 2 the productid parameter in classifieds.php, and 3 the id parameter in shop.php...

Cross site scripting

Cross-site scripting XSS vulnerability in forwardtofriend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter...

CVE-2008-3237

Cross-site scripting XSS vulnerability in forwardtofriend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter...

CVE-2008-3237

CVE-2008-3237 is a reported XSS vulnerability affecting ITechBids 7.0 Gold. The flaw occurs in forward_to_friend.php, where the productid parameter can be exploited to inject arbitrary web script or HTML. This impacts users who can be targeted via crafted input sent to the affected endpoint, pote...

CVE-2008-3238

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via 1 the sellerid parameter in sellersothersitem.php, 2 the productid parameter in classifieds.php, and 3 the id parameter in shop.php...

ITechBids 7.0 Gold (XSS/SQL) Multiple Remote Vulnerabilities

No description provided by source. ITechBids 7.0 Gold Multiple Remote Vulnerabilities Website : http://www.itechscripts.com Founded By : Encrypt3d.M!nd NOTE:I Didn't Search The Script Well,So Maybe There is other Vulnerabilities. 1- Cross-site scripting XSS: Affected File : forwardtofriend.php Po...

CVE-2008-2527

Cross-site scripting XSS vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the...

Vbulletin 3.7.0 Gold >> Sql injection on faq.php

By : Ali JasbiHackerz.ir security & hacking research team Vendor : vbulletin.org version : 3.7.0 Gold Vulnerability: Sql injection http://www.domain.com/vBulletin/faq.php?s=&do=search&q=Sql injection&match=any&titlesonly=1 test it: faq.php?s=&do=search&q='&match=any&titlesonly=1...

CVE-2008-1793

CVE-2008-1793 involves multiple cross-site scripting (XSS) vulnerabilities in the view.cgi module of Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS Gold. The weaknesses allow remote attackers to inject arbitrary web script or HTML via the (1) AdNum and (2) Department para...

Sql injection

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-0776

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-0776

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-0776

CVE-2008-0776 concerns SQL injection in iTechBids Gold 6.0’s detail.php via the item_id parameter. The vulnerability enables remote attackers to alter or disclose database data by crafting input that is not properly sanitized. Affected component is the detail.php script; root cause is improper ha...

Re: Logs visualization in WS_FTP Server Manager 6.1.0.0

Luigi Auriemma wrote: WSFTP Server Manager aka WSFTP WebService is the web administration interface of the IpSwitch WSFTP server and runs by default on port 80. This also affects the Ipswitch What's Up Gold 11.03 web server...

Unfixed XSS vulnerability at www.gold-host.ru

Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting www.gold-host.ru, which at the time of submission ranked 9071767 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It...

CVE-2007-5989

Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short string values" that result in heap corruption...

Cross site scripting

Cross-site scripting XSS vulnerability in default.asp in CREApark GOLD KOY PORTALI allows remote attackers to inject arbitrary web script or HTML via the aranan parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...