CVE-2008-5934: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute arbitrary SQL commands via the idsezione parameter...

CVE-2008-5933: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in CMS ISWEB 3.0 allow remote attackers to inject arbitrary web script or HTML via 1 the strcerca parameter aka the input field for the cerca action or 2 the idoggetto parameter. NOTE: some of these details are obtained from third par...

IsWeb CMS 3.0 SQL Injection / XSS

■ IsWeb CMS v 3.0 $qL/XsS Multiple vulnerabilities --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection SIte vuln: http://www.cmsisweb.it --------------------------------------- DeM0: |:...

IsWeb CMS 3.0 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. ■ IsWeb CMS v 3.0 $qL/XsS Multiple vulnerabilities --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection SIte vuln: http://www.cmsisweb.it --------------------------------------- ■ Bli...

IsWeb CMS 3.0 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= IsWeb CMS 3.0 SQL/XSS Multiple Remote Vulnerabilities ======================================================= ¦ IsWeb CMS v 3.0 $qL/XsS Multiple vulnerabilities...

isweb CMS 3.0 - SQL Injection / Cross-Site Scripting

■IsWeb CMS v 3.0 $qL/XsS Multiple vulnerabilities --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection SIte vuln: http://www.cmsisweb.it --------------------------------------- DeM0: |:...

isweb CMS 3.0 - SQL Injection Cross-Site Scripting

isweb CMS 3.0 - SQL Injection Cross-Site Scripting ■IsWeb CMS v 3.0 $qL/XsS Multiple vulnerabilities --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection SIte vuln: http://www.cmsisweb.it...