CVE-2009-3901: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web script or HTML via the UserGUID parameter to home/index.asp and other unspecified vectors...

Joe guest(JoeKoe) CMS 4.0 background to get shell-vulnerability warning-the black bar safety net

Without any technology, purely blind Simon Joe guestJoeKoe CMS 4.0 background to get the shell. Come backstage—system administration—site configuration—site namein the site name there is written a word. ! joekoeshell1 Then by word of the link is connected. www.XXX.com/index.asp !...

AW BannerAd - Authentication Bypass

AW BannerAd - Authentication Bypass AW-BannerAd Login ByPass By JxE-13 Ro0T-MaFia Sistema : AW-BannerAd,Asp Scripts Archivo : adv/admin/index.asp User&Pass:' or 'x'='x :' or 'x'='x milw0rm.com 2009-08-03...

Sql injection

Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execute arbitrary SQL commands via the 1 login and 2 senha parameters...

CVE-2009-2142

CVE-2009-2142 affects Zip Store Chat (versions 4.0 and 5.0) via admin/index.asp. Multiple SQL injection vulnerabilities enable remote attackers to modify or query backend databases by supplying crafted values in the (1) login and (2) senha parameters. The CVE entry cites arbitrary SQL execution a...

CVE-2009-2142: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execute arbitrary SQL commands via the 1 login and 2 senha parameters...

Simbas CMS 2.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------- ----------------------------------------------------- Simbas Content Management System auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home:...

CVE-2008-6353

CVE-2008-6353 describes an SQL injection vulnerability in ASP-CMS 1.0, specifically in index.asp, exploitable via the cha parameter. The underlying issue is untrusted input used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. The NVD data assigns a high impact (base s...

CVE-2008-6353: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter...

CVE-2008-6041

Multiple cross-site scripting XSS vulnerabilities in Index.asp in Dataspade 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 ViewName, 2 TableName, 3 OrderBy, and 4 FilterField parameters...

CVE-2008-6041

CVE-2008-6041 affects Dataspade 1.0: multiple XSS vulnerabilities in Index.asp allow injection of arbitrary script/HTML via (1) ViewName, (2) TableName, (3) OrderBy, and (4) FilterField. Impact is remote_SCRIPT execution as described; CVSS v2 base score 4.3 (Medium) with vector AV:N/AC:M/Au:N/C:N...

CVE-2008-6041

Multiple cross-site scripting XSS vulnerabilities in Index.asp in Dataspade 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 ViewName, 2 TableName, 3 OrderBy, and 4 FilterField parameters...

CVE-2008-6041: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Index.asp in Dataspade 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 ViewName, 2 TableName, 3 OrderBy, and 4 FilterField parameters...

CVE-2009-0334

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action...

CVE-2009-0335

Cross-site scripting XSS vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML via the view parameter...

CVE-2009-0337

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action...

Sql injection

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML via the view parameter...

CVE-2009-0334

CVE-2009-0334 describes a SQL injection vulnerability in index.asp of Katy Whitton BlogIt! that allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action. The issue is reflected in multiple sources (NVD/NVD CVE entry) with a high impact score (7.5, high)...