CVE-2009-0337

CVE-2009-0337 affects the BlogIt! application by Katy Whitton, where the vulnerable entry point is index.asp. The issue arises from SQL injection via the (1) month and (2) year parameters, allowing remote attackers to execute arbitrary SQL commands. This is a network-accessible vulnerability with...

CVE-2009-0337

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0335

CVE-2009-0335 is an XSS vulnerability in Katy Whitton BlogIt! (index.asp) exploitable via the view parameter. Affected component is the BlogIt! index page; root cause is input handling that allows arbitrary web script/HTML to be injected. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) w...

CVE-2009-0334: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action...

CVE-2009-0335: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML via the view parameter...

CVE-2009-0337: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

ASPired2Quote Database Disclosure

--------------------------------------------------------- Portal Name: ASPired2Quote Vendor : http://thenetguys.us/Home/Quote.asp Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD: http://site.com/Path/admin/quote.mdb...

ASPired2Quote (quote.mdb) Remote Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: ASPired2Quote Vendor : http://thenetguys.us/Home/Quote.asp Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...

ASP-CMS 1.0 (index.asp cha) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= ASP-CMS 1.0 index.asp cha SQL Injection Vulnerability ======================================================= ASP-CMS v.1.0 Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Download :...

Sql injection

SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the sideid parameter...

CVE-2008-4377: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the sideid parameter...

Dataspade xss

Vuln. discovered by : r0t Date: 23 September 2008 Vendor:http://www.dataspade.com/ affected versions:DataSpade V1.0 other versions also can be affected. orginal advisory: http://pridels-team.blogspot.com/2008/09/dataspade-xss-vuln.html DataSpade contains a flaws that allows a remote Cross-Site...

CVE-2008-3417: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the r parameter, a different vector than CVE-2006-6115 and CVE-2007-2561...

FipsCMS Light 2.1 - 'r' SQL Injection

Exploit Code: victim/path/home/index.asp?w=pages&r=9999999 union select all 0,username,null,0x1 from admin victim/path/home/index.asp?w=pages&r=9999999 union select all 0,password,null,0x1 from admin http://localhost:2222/lab/cms/admin Download:http://login.fipsasp.com/File.asp?ID=60&CatID=5 Foun...

MVC-Web CMS 1.0/1.2 (index.asp newsid) SQL Injection Vulnerability

No description provided by source. Bl@ckbe@rD 'Tunisian TerrorisT' ------------------------- $$$$$$$$$$$$$$$$$$$$$$$---------------------------------------...

MVC-Web CMS 1.0/1.2 (index.asp newsid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== MVC-Web CMS 1.0/1.2 index.asp newsid SQL Injection Vulnerability ================================================================== -------------------------...

CVE-2008-2634: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.asp in I-Pos Internet Pay Online Store 1.3 Beta and earlier allows remote attackers to execute arbitrary SQL commands via the item parameter...

i-pos StoreFront 1.3 - index.asp SQL Injection

i-pos StoreFront 1.3 - index.asp SQL Injection source: https://www.securityfocus.com/bid/29471/info i-pos Storefront is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...

Unfixed XSS vulnerability at recanati.tau.ac.il

Security researcher wir3less-hack3r, has submitted on 27/04/2008 a cross-site-scripting XSS vulnerability affecting recanati.tau.ac.il, which at the time of submission ranked 27363 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2008. It ...

myphotographer image shop script /events/index.asp sql injection

myphotographer image shop script /events/index.asp sql injection Credit : CodeXpLoder'tq mail : codexploderathotmaildotcom site : Biyosecurity.net,expw0rm.com thx : BiyoSecurityTeam,Liz0ziM,eno7,3APA3A Sourge site : http://www.myphotographer.com/support/ 1-...