CVE-2006-6083

SQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2006-6082: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to addlisting.asp or the 2 search parameter to search.asp...

CVE-2006-6083: Undefined Security Weakness

SQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote attackers to execute arbitrary SQL commands via the category parameter...

PT-2006-6727 · Creascripts · Creascripts Creadirectory

Name of the Vulnerable Software and Affected Versions: CreaScripts Creadirectory affected versions not specified Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, th...

CVE-2006-6088: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in BlueCollar i-Gallery 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 n or 2 d parameter in igallery.asp, or 3 an unspecified parameter related to search, possibly the Search Gallery field, or the myquery parameter, i...

CVE-2006-6090: Undefined Security Weakness

Multiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute arbitrary SQL commands via the 1 password parameter to a adminlogin.asp, the 2 name or 3 password parameter to b userlogin.asp, or the 3 search parameter to search.asp...

Link Exchange Lite [injection sql]

vendor site: http://softacid.net/ product:Link Exchange Lite bug: injection sql risk : high injection sql post : /search.asp post your sql query into the search engine field injection sql get: /linkslist.asp?psearch='sql laurent gaffi & benjamin moss http://s-a-p.ca/ contact: [email protected]...

CVE-2006-6030

Multiple SQL injection vulnerabilities in E-Calendar Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 passwd Password fields in a admin/default.asp; or the 3 Event Title, 4 Location, or 5 Description field when making a search engine query in b search.asp...

CVE-2006-6030

Multiple SQL injection vulnerabilities affect E-Calendar Pro 3.0. Remote attackers can execute arbitrary SQL via (1) username and (2) passwd fields in admin/default.asp or (3) Event Title, (4) Location, or (5) Description in search.asp, as described for CVE-2006-6030. The underlying issue is impr...

CVE-2006-6030: Undefined Security Weakness

Multiple SQL injection vulnerabilities in E-Calendar Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 passwd Password fields in a admin/default.asp; or the 3 Event Title, 4 Location, or 5 Description field when making a search engine query in b search.asp...

CVE-2006-5958: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script or HTML via the 1 username and 2 password fields in a login.asp, 3 search field in b search.asp, and 4 email field in c sendpassword.asp...

E-Calendar Pro 3.0 [ login bypass & injection sql (post)]

vendor site:http://www.futuretec-soft.com/ product:E-Calendar Pro 3.0 bug:login bypass & injection sql post risk:high login bypass : username: 'or''=' passwd: 'or''=' injection sql post: in : /search.asp post your query into the search engine . laurent gaffie & benjamin mosse http://s-a-p.ca/...

ecalpro30.txt

vendor site:http://www.futuretec-soft.com/ product:E-Calendar Pro 3.0 bug:login bypass & injection sql post risk:high login bypass : username: 'or''=' passwd: 'or''=' injection sql post: in : /search.asp post your query into the search engine . laurent gaffié & benjamin mossé http://s-a-p.ca/...

CVE-2006-5635: Undefined Security Weakness

SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter...

SQL in WebWizForum by almaster hacker

WebWizForum aLMaSTeR HaCKeR .. SQL FOunder - | [email protected]|- Gr33tz :- To Evil Hacker - Kuwaiti Hacker - Devil-00 &..... all members in Lezr.com , securityGurusdotcom......... SQL In search.asp: http://www.site.com/forum/search.asp?KW=|SQL| Error: Microsoft OLE DB Provider for SQL Server...

Web Wiz Forums forum/search.asp KW Parameter SQL Injection (deprecated)

Binary data 3801.prm...

[SA22013] ECardPro "keyword" SQL Injection Vulnerability

TITLE: ECardPro "keyword" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA22013 VERIFY ADVISORY: http://secunia.com/advisories/22013/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: ECardPro 2.x http://secunia.com/product/11997/ DESCRIPTION: ajann has...

CVE-2006-4872

The CVE-2006-4872 entry describes an SQL injection in Keyvan1 (Keyvan Janghorbani) ECardPro 2.0, exploitable via the keyword parameter in search.asp. The affected component is the search functionality (search.asp) and the underlying cause is an SQL injection allowing remote execution of arbitrary...

ECardPro v2.0(search.asp) Remote SQL Injection Vulnerability

Vulnerability Report Title : ECardPro v2.0search.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.keyvan1.com Exploit; Data: MSSQL http://target/path/search.asp?keyword='SQL HERE Example: search.asp?keyword='AND201=convertint,20@@servicename == MSSQL Service Name Adm...

CVE-2006-4872: Undefined Security Weakness

SQL injection vulnerability in search.asp in Keyvan1 aka Keyvan Janghorbani ECardPro 2.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter...