CVE-2010-1733

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...

CVE-2010-1733

Summary: CVE-2010-1733 affects OCS Inventory NG before 1.02.3 with multiple SQL injection vulnerabilities. The two exploitable vectors are: (1) multiple inventory fields in the search form via index.php, and (2) the Software name field in the All softwares search form via index.php. The root caus...

OCS Inventory NG < 1.02.3 Multiple Vulnerabilities

OCS Inventory NG is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

AutoDealer 1 / 2 SQL Injection

Exploit Title:MSSQLi Vulnerability in AutoDealer Ver.1 and Ver.2 Version: Web Application vendor :http://www.aspsiteware.com/Auto.asp Date: 30 apr,2010 Dork:Copyright © 2010 ASP SiteWare. All rights reserved. Author:Sid3^effects Code :...

AutoDealer 1.0/2.0 - MSSQL Injection

vendor :http://www.aspsiteware.com/Auto.asp Date: 30 apr,2010 Dork:Copyright © 2010 ASP SiteWare. All rights reserved. -------------------------------------------------------------------------------------- Sid3^effects aKa HaRi Greetz to all Andhra Hackers and ICW MemebersIndian Cyber Warriors...

AutoDealer Ver.1 and Ver.2 MSSQLi Vulnerability

Exploit for asp platform in category web applications =============================================== AutoDealer Ver.1 and Ver.2 MSSQLi Vulnerability =============================================== vendor :http://www.aspsiteware.com/Auto.asp Date: 30 apr,2010 Dork:Copyright © 2010 ASP SiteWare...

AutoDealer 1.02.0 - MSSQL Injection

AutoDealer 1.02.0 - MSSQL Injection vendor :http://www.aspsiteware.com/Auto.asp Date: 30 apr,2010 Dork:Copyright © 2010 ASP SiteWare. All rights reserved. -------------------------------------------------------------------------------------- Sid3^effects aKa HaRi Greetz to all Andhra Hackers and...

CVE-2010-1595

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

DEBIAN-CVE-2010-1594

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1594

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1595

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

CVE-2010-1594

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

Sql injection

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1595

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

CVE-2010-1594

OCS Inventory NG 1.02.1 is affected by multiple Cross‑Site Scripting (XSS) vulnerabilities in ocsreports/index.php, allowing remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3) the ega_1 parameter. The issue is documented across CVE-201...

CVE-2010-1594

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1594

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1595

CVE-2010-1595 affects OCS Inventory NG 1.02.1, specifically the ocsreports/index.php component, where multiple SQL injection vulnerabilities exist via the c, val_1, and onglet_bis parameters. The issue allows remote attackers to execute arbitrary SQL commands (impact: partial confidentiality, int...

CVE-2010-1595

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...