Sql injection

SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the 1 UserID and 2 Pwd parameters. NOTE: this might be related to CVE-2004-2108...

Cross site scripting

Cross-site scripting XSS vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the srkeys parameter...

CVE-2008-6258

SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the 1 UserID and 2 Pwd parameters. NOTE: this might be related to CVE-2004-2108...

CVE-2008-6258

SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the 1 UserID and 2 Pwd parameters. NOTE: this might be related to CVE-2004-2108...

CVE-2008-6259

Cross-site scripting XSS vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the srkeys parameter...

CVE-2008-6258

The CVE-2008-6258 entry describes an SQL injection vulnerability in QuadComm Q-Shop 3.0 (and possibly earlier) affecting users.asp, where the (1) UserID and (2) Pwd parameters allow remote attackers to execute arbitrary SQL commands. This is a classic input-based injection affecting the web appli...

CVE-2008-6259

CVE-2008-6259 describes a cross-site scripting (XSS) vulnerability in QuadComm Q-Shop 3.0 (search.asp) that allows an attacker to inject arbitrary script/HTML via the srkeys parameter. Affected product: QuadComm Q-Shop 3.0 and possibly earlier versions. Root cause: unsafeguarded handling of the s...

CVE-2008-6258: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the 1 UserID and 2 Pwd parameters. NOTE: this might be related to CVE-2004-2108...

CVE-2008-6259: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the srkeys parameter...

Q-News 2.0 - Remote Command Execution

Q-News 2.0 - Remote Command Execution Author = FireShot , Jacopo Vuga. Mail = fireshotautisticiorg Vulnerability = Remote Command Execution Software = q-news 2.0 Download = http://ovh.dl.sourceforge.net/sourceforge/php-box/2.0nologin.zip Greets to = Osirys for his friendship and his tips, Myral,...

q-news 2.0 Command Execution

Author = FireShot , Jacopo Vuga. Mail = fireshotautisticiorg Vulnerability = Remote Command Execution Software = q-news 2.0 Download = http://ovh.dl.sourceforge.net/sourceforge/php-box/2.0nologin.zip Greets to = Osirys for his friendship and his tips, Myral, str0ke CODE " print "Cannot write to...

q-news 2.0 Remote Command Execution Exploit

Exploit for unknown platform in category web applications =========================================== q-news 2.0 Remote Command Execution Exploit =========================================== Author = FireShot , Jacopo Vuga. Vulnerability = Remote Command Execution Software = q-news 2.0 Download =...

q-news 2.0 Remote Command Execution Exploit

No description provided by source. Author = FireShot , Jacopo Vuga. Mail = fireshotatautisticidotorg Vulnerability = Remote Command Execution Software = q-news 2.0 Download = http://ovh.dl.sourceforge.net/sourceforge/php-box/2.0nologin.zip Greets to = Osirys for his friendship and his tips, Myral...

Q-News 2.0 - Remote Command Execution

Author = FireShot , Jacopo Vuga. Mail = fireshotautisticiorg Vulnerability = Remote Command Execution Software = q-news 2.0 Download = http://ovh.dl.sourceforge.net/sourceforge/php-box/2.0nologin.zip Greets to = Osirys for his friendship and his tips, Myral, str0ke CODE " print "Cannot write to...

CVE-2009-0026

Multiple cross-site scripting XSS vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.jsp or 2 swr.jsp...

CVE-2009-0026

Multiple cross-site scripting XSS vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.jsp or 2 swr.jsp...

PT-2009-2741 · Apache · Apache Jackrabbit

Name of the Vulnerable Software and Affected Versions: Apache Jackrabbit versions prior to 1.5.2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the ...

CVE-2009-0026: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.jsp or 2 swr.jsp...

Built2Go PHP Link Portal 1.95.1 - Arbitrary File Upload

Built2Go PHP Link Portal v1.95.1 RFU ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 22.11.2008 Home: z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : dork mu : "PHP Link Portal v1.95.1 © Big...

openSUSE 10 Security Update : wireshark (wireshark-5783)

This update fixes problems that could crash wireshark when processing compressed data CVE-2008-3933 as well as CVE-2008-4680 USB dissector crash, CVE-2008-4681 Bluetooth RFCOMM dissector crash, CVE-2008-4683 Bluetooth ACL dissector crash, CVE-2008-4684 PRP and MATE dissector crash and CVE-2008-46...