CVE-2009-4721

CVE-2009-4721 affects Andrews-Web (A-W) BannerAd 1.0, with multiple SQL injection vulnerabilities in Admin/index.asp that allow remote attackers to execute arbitrary SQL commands via the (1) User and (2) Password parameters. The root cause is unsafely constructed SQL queries in that page, enablin...

Joe guest(JoeKoe) CMS 4.0 background to get shell-vulnerability warning-the black bar safety net

Without any technology, purely blind Simon Joe guestJoeKoe CMS 4.0 background to get the shell. Come backstage—system administration—site configuration—site namein the site name there is written a word. ! joekoeshell1 Then by word of the link is connected. www.XXX.com/index.asp !...

AW BannerAd - Authentication Bypass

AW BannerAd - Authentication Bypass AW-BannerAd Login ByPass By JxE-13 Ro0T-MaFia Sistema : AW-BannerAd,Asp Scripts Archivo : adv/admin/index.asp User&Pass:' or 'x'='x :' or 'x'='x milw0rm.com 2009-08-03...

Sql injection

Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execute arbitrary SQL commands via the 1 login and 2 senha parameters...

CVE-2009-2142

CVE-2009-2142 affects Zip Store Chat (versions 4.0 and 5.0) via admin/index.asp. Multiple SQL injection vulnerabilities enable remote attackers to modify or query backend databases by supplying crafted values in the (1) login and (2) senha parameters. The CVE entry cites arbitrary SQL execution a...

Simbas CMS 2.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------- ----------------------------------------------------- Simbas Content Management System auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home:...

CVE-2008-6353

CVE-2008-6353 describes an SQL injection vulnerability in ASP-CMS 1.0, specifically in index.asp, exploitable via the cha parameter. The underlying issue is untrusted input used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. The NVD data assigns a high impact (base s...

CVE-2008-6041

Multiple cross-site scripting XSS vulnerabilities in Index.asp in Dataspade 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 ViewName, 2 TableName, 3 OrderBy, and 4 FilterField parameters...

CVE-2008-6041

CVE-2008-6041 affects Dataspade 1.0: multiple XSS vulnerabilities in Index.asp allow injection of arbitrary script/HTML via (1) ViewName, (2) TableName, (3) OrderBy, and (4) FilterField. Impact is remote_SCRIPT execution as described; CVSS v2 base score 4.3 (Medium) with vector AV:N/AC:M/Au:N/C:N...

CVE-2008-6041

Multiple cross-site scripting XSS vulnerabilities in Index.asp in Dataspade 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 ViewName, 2 TableName, 3 OrderBy, and 4 FilterField parameters...

CVE-2009-0337

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0335

Cross-site scripting XSS vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML via the view parameter...

CVE-2009-0334

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action...

Sql injection

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action...

Cross site scripting

Cross-site scripting XSS vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML via the view parameter...

CVE-2009-0334

CVE-2009-0334 describes a SQL injection vulnerability in index.asp of Katy Whitton BlogIt! that allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action. The issue is reflected in multiple sources (NVD/NVD CVE entry) with a high impact score (7.5, high)...

CVE-2009-0335

CVE-2009-0335 is an XSS vulnerability in Katy Whitton BlogIt! (index.asp) exploitable via the view parameter. Affected component is the BlogIt! index page; root cause is input handling that allows arbitrary web script/HTML to be injected. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) w...

CVE-2009-0337

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0337

CVE-2009-0337 affects the BlogIt! application by Katy Whitton, where the vulnerable entry point is index.asp. The issue arises from SQL injection via the (1) month and (2) year parameters, allowing remote attackers to execute arbitrary SQL commands. This is a network-accessible vulnerability with...