CVE-2008-4872

Cross-site scripting XSS vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4872

Cross-site scripting XSS vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4872

The CVE-2008-4872 entry describes a Cross-site scripting (XSS) vulnerability in the iTechBids Gold 5.0 product, specifically in the bidhistory.php script, where an attacker can inject arbitrary web script or HTML through the item_id parameter. The affected component is the bidhistory.php code pat...

CVE-2008-4872: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4036: Integer Overflow or Wraparound

Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain privileges via a crafted application that triggers an erroneous decrement of a variable, related to validation of parameters for Virtual...

CVE-2008-4144

SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action...

Sql injection

SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action...

CVE-2008-4144

SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action...

CVE-2008-4144

The CVE-2008-4144 entry documents a SQL injection in the ACG-ScriptShop E-Gold Script Shop, specifically in index.php's showcat action via the cid parameter. The underlying issue is a vulnerable input (cid) used in SQL queries, allowing remote attackers to execute arbitrary SQL commands. The affe...

CVE-2008-4144: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action...

ACG-ScriptShop E-Gold Script Shop 'cid' SQL注入漏洞

BUGTRAQ ID: 31015 CNCAN ID：CNCAN-2008090501 ACG-ScriptShop E-Gold Script Shop是一款基于PHP的WEB应用程序。 ACG-ScriptShop E-Gold Script Shop不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于脚本对用户提交给'cid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 DiscountedScripts ACG-ScriptShop E-Gold Script Shop...

Unfixed XSS vulnerability at www.arcadepimps.com

Security researcher GoLd, has submitted on 19/08/2008 a cross-site-scripting XSS vulnerability affecting www.arcadepimps.com, which at the time of submission ranked 14155275 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/09/2009. It is...

CVE-2008-3003: Improper Input Validation

Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD password string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the...

Cross site scripting

Cross-site scripting XSS vulnerability in forwardtofriend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter...

CVE-2008-3237

Cross-site scripting XSS vulnerability in forwardtofriend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter...

Sql injection

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via 1 the sellerid parameter in sellersothersitem.php, 2 the productid parameter in classifieds.php, and 3 the id parameter in shop.php...

CVE-2008-3238

Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands via 1 the sellerid parameter in sellersothersitem.php, 2 the productid parameter in classifieds.php, and 3 the id parameter in shop.php...

CVE-2008-3237

CVE-2008-3237 is a reported XSS vulnerability affecting ITechBids 7.0 Gold. The flaw occurs in forward_to_friend.php, where the productid parameter can be exploited to inject arbitrary web script or HTML. This impacts users who can be targeted via crafted input sent to the affected endpoint, pote...

CVE-2008-3237: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in forwardtofriend.php in ITechBids 7.0 Gold allows remote attackers to inject arbitrary web script or HTML via the productid parameter...