CVE-2005-1011: Undefined Security Weakness

SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter...

CVE-2005-1012: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Iatek SiteEnable allows remote attackers to inject arbitrary web script or HTML via 1 the contenttype parameter to content.asp, 2 the title, or 3 the description...

SiteEnable Multiple Input Validation Vulnerabilities

The remote host is running a version of the SiteEnable CMS package that has several vulnerabilities : - SQL Injection Vulnerability Due to a failure to properly sanitize user input to the 'sortby' parameter of the 'content.asp' script, an attacker can execute SQL queries against the underlying...

SiteEnable - SQL Injection

SiteEnable - SQL Injection source: https://www.securityfocus.com/bid/12985/info SiteEnable is reported prone to an SQL injection vulnerability. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks...