CVE-2012-0935

CVE-2012-0935 describes a SQL injection vulnerability in Aryadad CMS, exploitable via the PageID parameter in Default.aspx. The issue allows remote attackers to execute arbitrary SQL commands, with impact per the NVD vector: AV:N/AC:L/Au:N/C:P/I:P/A:P, base score 7.5 (HIGH). Public references (Ex...

CVE-2012-0935: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via the PageID parameter...

Cross Site Request Forgery - Deleting User's Dashboards

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that the application is succeptible to Cross-Site Request Forgery attacks within this URL:...

Cross Site Request Forgery - Deleting User's Dashboards

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that the application is succeptible to Cross-Site Request Forgery attacks within this URL:...

CVE-2010-4843: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execute arbitrary SQL commands via the pageId parameter...

Rocketmedia Blind SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Sql injection

SQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PageId parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-4703

CVE-2010-4703 concerns a SQL injection vulnerability affecting HotWebScripts HotWeb Rentals. The issue is in the default.asp page, exploitable via the PageId parameter, enabling remote attackers to execute arbitrary SQL commands. The available sources in the connected documents consistently descr...

CVE-2010-4703

SQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PageId parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-4703: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PageId parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

HotWeb Rental SQL Injection

HotWeb Rentals "PageId" SQL Injection Vulnerability PRODUCT http://www.hotwebscripts.co.uk/ Input passed to the "PageId" parameter in default.asp is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. POC...

DesigNsbyjm CMS 1.0 - PageId SQL Injection

DesigNsbyjm CMS 1.0 - PageId SQL Injection =========================================================================== === » Note : Hacker R0x Lamerz Sux ! =========================================================================== === » DesigNsbyjm Cms == 1.0 PageId Remote SQL Injection...

DesigNsbyjm CMS 1.0 - 'PageId' SQL Injection

=========================================================================== === » Note : Hacker R0x Lamerz Sux ! =========================================================================== === » DesigNsbyjm Cms == 1.0 PageId Remote SQL Injection Vulnerability...

deleted page is still accessible in Confluence when accessing via viewpage.action?pageId in the url

Deleted pages can still be accessed in Confluence when one enters their pageId in the url. For example: noformat http://confluence.atlassian.com/pages/viewpage.action?pageId=196837485 http://confluence.atlassian.com/display/CONFKB/Office+Connector noformat The links above are referring to the sam...

Sql injection

SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pageID parameter...

CVE-2008-5491: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pageID parameter...

CVE-2008-5336

SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

CVE-2008-5336: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

CVE-2008-5293

SQL injection vulnerability in index.php in WebStudio eHotel allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

CVE-2008-5294

SQL injection vulnerability in index.php in WebStudio eCatalogue allows remote attackers to execute arbitrary SQL commands via the pageid parameter...