CVE-2011-3688

Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via 1 the g parameter to Conference/Audio/AudioResourceContainer.asp or 2 the txtConferenceID parameter to Login/HostLogin.asp...

Sql injection

Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via 1 the g parameter to Conference/Audio/AudioResourceContainer.asp or 2 the txtConferenceID parameter to Login/HostLogin.asp...

CVE-2011-3688

Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via 1 the g parameter to Conference/Audio/AudioResourceContainer.asp or 2 the txtConferenceID parameter to Login/HostLogin.asp...

PT-2011-4578

Name of the Vulnerable Software and Affected Versions Sonexis ConferenceManager version 9.3.14.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via two different parameters: the g parameter to the "Conference/Audio/AudioResourceContainer.asp"...

PT-2011-4577

Name of the Vulnerable Software and Affected Versions Sonexis ConferenceManager version 9.2.11.0 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through several parameters in...

CVE-2011-3687: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Sonexis ConferenceManager 9.2.11.0 allow remote attackers to inject arbitrary web script or HTML via 1 the txtConferenceID parameter to HostLogin.asp, 2 the txtConferenceID parameter to ParticipantLogin.asp, 3 the acp parameter to ForgotPIN.asp...