CVE-2008-0440

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts...

CVE-2008-0440

The affected software is AlstraSoft Forum Pay Per Post Exchange 2.0. The CVE entry describes the root cause as storing passwords in cleartext, enabling attackers to access user accounts. The connected documents confirm this issue, but do not provide a remediation or patch version. Exploitation st...

CVE-2008-0429

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forumcatview action...

CVE-2008-0429

CVE-2008-0429 describes an SQL injection in the PHP file index.php for AlstraSoft Forum Pay Per Post Exchange 2.0. The vulnerability is exploitable via the catid parameter in the forum_catview action, potentially allowing remote attackers to execute arbitrary SQL commands and compromise data. The...

CVE-2008-0440: Undefined Security Weakness

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts...

CVE-2008-0429: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forumcatview action...

Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection

Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection --==+================================================================================+==-- --==+ Forum Pay Per Post SQL Injection Vulnerbilitys +==-- --==+================================================================================+==...

CVE-2007-6501

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp...

Cross site request forgery (csrf)

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp...

CVE-2007-6501

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp...

CVE-2007-6501

The CVE affects Hosting Controller 6.1 Hotfix 3.3 and earlier. It describes an unspecified vulnerability that allows remote authenticated users to enable or disable the "pay type" via a request to adminsettings/choosetranstype.asp. The connected documents provide this basic impact but do not spec...

CVE-2007-6501: Undefined Security Weakness

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp...

CVE-2007-4106

SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface allows remote attackers to execute arbitrary SQL commands via the Password parameter...

Sql injection

SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface allows remote attackers to execute arbitrary SQL commands via the Password parameter...

CVE-2007-4106

SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface allows remote attackers to execute arbitrary SQL commands via the Password parameter...

CVE-2007-4106

The CVE concerns SQL injection in the login.asp of CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface. The vulnerability allows remote attackers to execute arbitrary SQL commands via the Password parameter, implying an injection flaw in authentication logic. Connected...

payroll-sql.txt

A R I A - S E C U R I T Y Pay Roll - Time Sheet and Punch Card Application With Web Interface SQL Injection Vendor: http://www.codewidgets.com http://target.com/PATH/login.asp Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...

CVE-2007-4106: Undefined Security Weakness

SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface allows remote attackers to execute arbitrary SQL commands via the Password parameter...

Pay Roll Time Sheet and Punch Card Application With Web UI - login.asp SQL Injection

Pay Roll Time Sheet and Punch Card Application With Web UI - login.asp SQL Injection source: https://www.securityfocus.com/bid/25114/info Pay Roll - Time Sheet and Punch Card Application With Web Interface is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize...

CVE-2006-6392

Directory traversal vulnerability in index.php in plx Web Studio aka plxWebDev plx Pay 3.2 and earlier allows remote attackers to include and execute arbitrary local files, or obtain user credentials and other sensitive information, via a .. dot dot in the read parameter. NOTE: The provenance of...