108 matches found
CVE-2006-6243
Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...
CVE-2006-6243
Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...
CVE-2006-6243
This CVE (CVE-2006-6243) describes multiple SQL injection vulnerabilities in index.asp of FipsSHOP, exploitable remotely via the (1) cat or (2) did parameter. The CVSS v2 base score is 7.5 (HIGH) with network access, low complexity, no authentication required, and partial impacts to confidentiali...
CVE-2006-6194
Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...
CVE-2006-6194
Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...
CVE-2006-6194
The CVE-2006-6194 entry describes multiple SQL injection vulnerabilities in index.asp of Ultimate Survey Pro, allowing remote attackers to execute arbitrary SQL commands via the (1) cat or (2) did parameters. Affected software: Ultimate Survey Pro (web component index.asp). Root cause: unsafely c...
Ultimate HelpDesk (XSS/Local File Disclosure) Vulnerabilities
No description provided by source. Title : Ultimate HelpDesk All Version Source/XSS Vulnerabilities Author : ajann Contact : : Login Before Vulnerabilities.: SOURCE------------------------------------------------------ http://target/path//getfile.asp?filename=SQL Example:...
CVE-2006-6149
CVE-2006-6149 affects JiRos FAQ Manager 1.0, where the vulnerability resides in the web-facing code: SQL injection via the tID parameter in index.asp. The underlying issue is improper input handling in the application that allows constructing and executing arbitrary SQL commands on the backend da...
FipsCMS Index.ASP SQL注入漏洞
FipsCMS是一款基于ASP的WEB应用程序。 FipsCMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行sql注入攻击，获得敏感信息。 问题是由于'Index.ASP'脚本对用户提交的'fid'参数缺少过滤，提交恶意sql查询作为参数数据，可更改原来的sql逻辑，获得敏感信息。 fipsASP fipsCMS 4.5 http://www,fipsasp.com/ !/usr/bin/perl Script Name: fipsCMS = v4.5 index.asp Remote SQL Injection Exploit Coded by : ajann Autho...
JiRos FAQ Manager 1.0 (index.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : JiRo?s FAQ Manager v1.0 index.asp Remote SQL Injection Vulnerability Author : ajann Contact : : http://target/path//index.asp?tID=SQL Example:...
FipsCMS Index.ASP SQL Injection Vulnerability
fipsCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...
JiRos FAQ Manager 1.0 - 'index.asp' SQL Injection
Title : JiRo´s FAQ Manager v1.0 index.asp Remote SQL Injection Vulnerability Author : ajann Contact : : http://target/path//index.asp?tID=SQL Example: //index.asp?tID=-1%20union%20select%200,uPassword,0,0,0,0,0,0,0,0,0,0,0,0%20from%20JFStblusers%20where%20no%20like%200...
fipsCMS <= 4.5 (index.asp) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: fipsCMS = v4.5 index.asp Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : use IO::Socket; if@ARGV 3 print " ======================================================================== // fipsCMS = v4.5 index.asp...
FipsCMS 4.5 - 'index.asp' SQL Injection
!/usr/bin/perl Script Name: fipsCMS newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || die "\n+ Connection failed...\n"; print $socket "GET $target HTTP/1.1\n"; print $socket "Host: $server\n"; print $socket "Accept: /\n"; print $socket "Connection: close\n\n"; print "+ Connected!...\n...
fipsCMS <= 4.5 (index.asp) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================= fipsCMS newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || di...
CVE-2006-5450
The CVE-2006-5450 entry concerns a SQL injection in the Kinesis Interactive Cinema System (KICS) CMS, exposed via index.asp. The vulnerability allows remote attackers to craft input for the (1) txtUsername and (2) txtPassword parameters to execute arbitrary SQL commands. Affected component/file: ...
CVE-2006-3031
Multiple cross-site scripting XSS vulnerabilities in index.asp in fipsCMS 4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 w, 2 phcat, 3 dayid, and 4 calw parameters...
Sql injection
SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it is not clear whether this report is associated with a specific product. If not, then it should not be included in CVE...
CVE-2006-1109
CVE-2006-1109: SQL injection vulnerability in index.asp of Total Ecommerce 1.0 via the id parameter allows remote arbitrary SQL execution. Root cause described as an injection vulnerability; exploitation details are not provided in the connected documents. No remediation steps, affected version i...
Advisory: TotalECommerce (index.asp id) Remote SQL Injection Vulnerability.
--Security Report-- Advisory: TotalECommerce index.asp id Remote SQL Injection Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 04/03/06 04:36 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: TotalECommerce...