TotalECommerce <= 1.0 (index.asp id) Remote SQL Injection Exploit

No description provided by source. Original advisory: http://www.nukedx.com/?viewdoc=18 Advisory by: nukedx Full PoC Explotation: GET - http://victim/dir/index.asp?secao=PageID&id=SQL EXAMPLE 1 -...

Sql injection

SQL injection vulnerability in index.asp in the Admin Panel in Dragon Design Services Network DDSN cm3 content manager CM3CMS allows remote attackers to execute arbitrary SQL commands via the 1 username or 2 password...

CVE-2006-0221

CVE-2006-0221 describes an SQL injection in the Admin Panel of Dragon Design Services Network (DDSN) cm3 content manager (CM3CMS), exploitable via the (1) username or (2) password fields on index.asp. The underlying issue is unsafely constructed SQL statements that allow remote attackers to execu...

CVE-2006-0122

Cross-site scripting XSS vulnerability in Public/Index.asp in Aquifer CMS allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter...

CVE-2005-4509

SQL injection vulnerability in index.asp in pTools allows remote attackers to execute arbitrary SQL commands via the docID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4509

SQL injection vulnerability in index.asp in pTools allows remote attackers to execute arbitrary SQL commands via the docID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4509

CVE-2005-4509 describes an SQL injection in index.asp for pTools, exploitable via the docID parameter to allow remote execution of arbitrary SQL commands. Affected software is pTools; vulnerability arises from improper handling of input in the docID field. Impact, as stated, includes partial conf...

CVE-2004-1648

CVE-2004-1648 is a cross-site scripting (XSS) vulnerability in Password Protect affecting multiple ASP pages (index.asp, ChangePassword.asp, users_list.asp, users_add.asp) via the ShowMsg parameter. The issue is documented across CVE entries (NVD, CVE List) with a MEDIUM severity (CVSS v2 base sc...