CVE-2007-4207: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in adminconsole/index.asp in Gallery In A Box allows remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password field. NOTE: these fields might be associated with the txtUsername and txtPassword parameters...

CVE-2007-4076

Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbitrary SQL commands via the 1 productid or 2 catid parameter in a product mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2007-4075

CVE-2007-4075: XSS in index.asp of Alisveris Sitesi Scripti. The vulnerability occurs in the search mod action via the q parameter, allowing remote attackers to inject arbitrary script/HTML. Affected software is the Alisveris Sitesi Scripti package; root cause is a reflected/parameter-based XSS i...

CVE-2007-4076

CVE-2007-4076 describes multiple SQL injection vulnerabilities in index.asp of the Alisveris Sitesi Scripti. The issue allows remote attackers to execute arbitrary SQL commands through the (1) product_id or (2) cat_id parameters in a product mod action. The NVD entry notes the provenance is from ...

CVE-2007-4076: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbitrary SQL commands via the 1 productid or 2 catid parameter in a product mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2007-4075: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Sql injection

SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-6115...

CVE-2007-2561

CVE-2007-2561 describes an SQL injection vulnerability in the fipsCMS web app. The flaw is in the file index.asp of fipsCMS 2.1, where the parameter pid can be manipulated by an attacker to execute arbitrary SQL commands on the backend database. This is noted as a different vector from CVE-2006-6...

CVE-2007-2561: Undefined Security Weakness

SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-6115...

CVE-2006-7118

The CVE-2006-7118 issue affects DMXReady Site Engine Manager 1.0, where index.asp is vulnerable to SQL injection via the mid parameter. The underlying cause is improper input handling allowing arbitrary SQL execution by remote attackers. The provided documents do not specify affected versions bey...

CVE-2006-7118: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.asp in DMXReady Site Engine Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2006-6398: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Superfreaker Studios UPublisher 1.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors in a sendarticle.asp and b printarticle.asp, and the ID parameter to c index.asp and d preferences.asp, different vectors than CVE-2006-58...

UApplication UGuestbook Index.ASP SQL注入漏洞

UApplication UGuestbook是一款基于ASP的WEB应用程序。 UApplication UGuestbook不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Index.ASP'脚本对用户提交的'page'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Uapplication Uguestbook 1.0 http://www.uapplication.com/ http://www.example.com/index.asp?Block=1&page=SQL INJECTION...

CVE-2006-6380

CVE-2006-6380 concerns a Cross-site Scripting (XSS) vulnerability in Ultimate HelpDesk’s index.asp, exploitable via the keyword parameter. The issue allows remote attackers to inject arbitrary web script or HTML into the page, with the potential to affect users’ sessions and data depending on the...

CVE-2006-6380: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary web script or HTML via the keyword parameter...

CVE-2006-6243

Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6243

Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6243

This CVE (CVE-2006-6243) describes multiple SQL injection vulnerabilities in index.asp of FipsSHOP, exploitable remotely via the (1) cat or (2) did parameter. The CVSS v2 base score is 7.5 (HIGH) with network access, low complexity, no authentication required, and partial impacts to confidentiali...

CVE-2006-6243

Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6243: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...