998 matches found
PT-2009-1304 · Web Scribble Solutions · Webclassifieds
Name of the Vulnerable Software and Affected Versions: Web Scribble Solutions webClassifieds 2005 Description: The issue concerns SQL injection vulnerabilities in the index.php file of webClassifieds 2005. Remote attackers can execute arbitrary SQL commands by manipulating the user and password...
Naymz multiple XSS
Naymz is a online profile system with positive and accurate information that you want others to find when they search for you online. Community Search fails to sanitize: 1."scriptalert'xss'/script...
Unfixed XSS vulnerability at www.lmwebhosting.net
Security researcher Thefucker, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting www.lmwebhosting.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is...
Unfixed XSS vulnerability at cokisimizvar.com
Security researcher Security-TR, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting cokisimizvar.com, which at the time of submission ranked 451349 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...
Unfixed XSS vulnerability at host.dataislem.com
Security researcher Thefucker, has submitted on 08/04/2007 a cross-site-scripting XSS vulnerability affecting host.dataislem.com, which at the time of submission ranked 996699 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/04/2007. It is...
Sql injection
SQL injection vulnerability in signin.aspx in WebStore Online Store Application Template allows remote attackers to execute arbitrary SQL commands via the Password parameter...
CVE-2007-4109
SQL injection vulnerability in signin.aspx in WebStore Online Store Application Template allows remote attackers to execute arbitrary SQL commands via the Password parameter...
CVE-2007-4108
SQL injection vulnerability in signin.aspx in WebEvents Online Event Registration Template allows remote attackers to execute arbitrary SQL commands via the Password parameter...
webstore-sql.txt
A R I A - S E C U R I T Y WebStore - Online Store Application Template SQL INJECTION Vendor: http://www.codewidgets.com http://target.com/PATH/signin.aspx Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net http://outlaw.aria-security.info...
CVE-2002-0673: Undefined Security Weakness
The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to the phone to log out the current user and re-register the phone using MyPingtel Sign-In to gain remote access and perform unauthorized actions...
Security update 1970-01-01
...
Microsoft Online Services Sign In Assistant Upgrade Version Applicability
Microsoft Online Services Sign In Assistant Upgrade Version Applicability Check...
Update Rollup for Microsoft Online Services Sign-In Assistant (KB2630976)
Microsoft Online Services Sign-In Assistant Update...
Security update 1970-01-01
...
Security update 1970-01-01
...
Security update 1970-01-01
...