CVE-2005-4001

CVE-2005-4001 affects phpYellowTM Pro/Lite Edition 5.33. Two SQL injection vectors are described: (1) haystack parameter to search_result.php and (2) ckey parameter to print_me.php, enabling remote execution of arbitrary SQL. The NVD metrics indicate base score 7.5 (HIGH) with network attack vect...

CVE-2005-3851

Cross-site scripting XSS vulnerability in search.asp in Online Attendance System OASYS Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via certain search parameters, possibly the keyword parameter...

CVE-2005-3850

Cross-site scripting XSS vulnerability in search.asp in Online Knowledge Base System OKBSYS Lite Edition 1.0 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the q parameter...

CVE-2005-3850

CVE-2005-3850 describes a cross-site scripting (XSS) vulnerability in the OKBSYS Lite Edition 1.0 search.asp page. The issue allows remote attackers to inject arbitrary script/HTML via hex-encoded values in the q parameter. The vulnerability is page/file/parameter specific (search.asp, q) and the...

CVE-2005-3852

The CVE-2005-3852 entry relates to OWOS Lite Edition for ASP 3.0. Affected component: search.asp; vulnerability: SQL injection via the keyword parameter. Impact: remote attackers could execute arbitrary SQL commands. No remediation details are provided in the supplied documents.

CVE-2005-3851

Cross-site scripting XSS vulnerability in search.asp in Online Attendance System OASYS Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via certain search parameters, possibly the keyword parameter...

CVE-2005-3851

CVE-2005-3851 is a cross-site scripting (XSS) vulnerability affecting Online Attendance System (OASYS) Lite 1.0. The flaw resides in search.asp where attacker-controlled search parameters (possibly the keyword parameter) can trigger script/HTML injection in the victim’s browser. The issue is docu...

CVE-2005-3850

Cross-site scripting XSS vulnerability in search.asp in Online Knowledge Base System OKBSYS Lite Edition 1.0 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the q parameter...

OKBSYS Lite 1.0 "search.asp" XSS vuln.

Online Knowledge Base System: Lite Edition 1.0 XSS vuln. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/okbsys-lite-10-searchasp-xss-vuln.html Vendor:www.onlinetechtools.com Product link:http://www.onlinetechtools.com/products/okbsys/ affected...

OASYS Lite 1.0 "search.asp" XSS vuln.

OASYS Lite 1.0 "search.asp" XSS vuln. Vuln. dicovered by : r0t Date: 25 nov. 2005 Original advisory:http://pridels.blogspot.com/2005/11/oasys-lite-10-searchasp-xss-vuln.html Vendor:www.onlinetechtools.com Product link:http://www.onlinetechtools.com/products/oasyslite/ affected vesion: 1.0 and pri...

OWOS Lite 3.0 SQL inj.

Online Work Order Suite: Lite Edition for ASP 3.0 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/owos-lite-30-sql-inj.html Vendor:www.onlinetechtools.com Product link:http://www.onlinetechtools.com/products/owoslite/ affected vesion:3.0 a...

CVE-2005-3697

Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via unspecified vectors in index.php...

CVE-2005-3697

CVE-2005-3697 affects Uresk Links 2.0 Lite. A vulnerability in the administration interface allows remote attackers to bypass authentication via unspecified vectors in index.php. The NVD entry lists CVSS v2 base score 7.5 (network, low complexity, no auth required; partial impact on confidentiali...

CVE-2005-3697

Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via unspecified vectors in index.php...

Comersus BackOffice Lite Administrative Bypass

Comersus ASP shopping cart is a set of ASP scripts creating an online shoppingcart. It works on a database of your own choosing, default is msaccess, and includes online administration tools. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced...

Woltlab Burning Board modcp.php Multiple Parameter SQL Injection

The remote version of Burning Board / Burning Board Lite is prone to SQL injection attacks due to its failure to sanitize user-supplied input to the 'x' and 'y' parameters of the 'modcp.php' script before using it in database queries. Provided an attacker has moderator privileges, these flaws may...

PHP Lite Calendar Express 2.2 - auth.php?cid SQL Injection

PHP Lite Calendar Express 2.2 - auth.php?cid SQL Injection source: https://www.securityfocus.com/bid/14504/info Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful...

PHP Lite Calendar Express 2.2 - 'auth.php?cid' SQL Injection

source: https://www.securityfocus.com/bid/14504/info Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the applicatio...

PHP Lite Calendar Express 2.2 - 'Subscribe.php?cid' SQL Injection

source: https://www.securityfocus.com/bid/14504/info Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the applicatio...

CVE-2002-2115

Technical details (affected product, component, version, root cause, impact, or fix) are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.