EUVD-2009-2611

Malware in sbrugna...

EUVD-2009-2610

Malware in sbrugna...

CVE-2009-2615

Multiple cross-site scripting XSS vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 zadminlogin.asp, 2 zforgot.asp, and possibly unspecified other components. NOTE: the provenance of this information is...

CVE-2009-2616

SQL injection vulnerability in zadminlogin.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

SitePal 1.1 - (Auth Bypass) SQL Injection Vulnerability

No description provided by source. SitePal v1.1Auth Bypass Remote SQL Injection Vulnerability ---------------------------------------------------------- author: R3d-D3v!L Date: 15.12.2009 7!M3:1-35 Home: www.Xp10.ME contact: N/A ----------------------------------------------------------- Exploit:...

SitePal v1.1(Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== SitePal v1.1Auth Bypass SQL Injection Vulnerability ===================================================== Exploit: username:admin password: X' or ' 1=1-- admin login for demo:...

SitePal 1.1 - Authentication Bypass

SitePal 1.1 - Authentication Bypass SitePal v1.1Auth Bypass Remote SQL Injection Vulnerability ---------------------------------------------------------- author: R3d-D3v!L Date: 15.12.2009 7!M3:1-35 Home: www.Xp10.ME contact: N/A ----------------------------------------------------------- Exploit...

SitePal 1.1 - Authentication Bypass

SitePal v1.1Auth Bypass Remote SQL Injection Vulnerability ---------------------------------------------------------- author: R3d-D3v!L Date: 15.12.2009 7!M3:1-35 Home: www.Xp10.ME contact: N/A ----------------------------------------------------------- Exploit: username:admin password: X' or '...

SitePal v1.1(Auth Bypass) SQL Injection Vulnerability

No description provided by source. SitePal v1.1Auth Bypass Remote SQL Injection Vulnerability ---------------------------------------------------------- author: R3d-D3v!L Date: 15.12.2009 7!M3:1-35 Home: www.Xp10.ME contact: N/A ----------------------------------------------------------- Exploit:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 zadminlogin.asp, 2 zforgot.asp, and possibly unspecified other components. NOTE: the provenance of this information is...

Sql injection

SQL injection vulnerability in zadminlogin.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2615

Multiple cross-site scripting XSS vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 zadminlogin.asp, 2 zforgot.asp, and possibly unspecified other components. NOTE: the provenance of this information is...

CVE-2009-2616

SQL injection vulnerability in zadminlogin.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2615

Multiple cross-site scripting XSS vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 zadminlogin.asp, 2 zforgot.asp, and possibly unspecified other components. NOTE: the provenance of this information is...

CVE-2009-2616

SQL injection vulnerability in zadminlogin.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2615

DataCheck Solutions SitePal 1.x is affected by multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via the page parameter to z_admin_login.asp and z_forgot.asp (and possibly other components). Root cause is unsafely reflected input without proper saniti...

CVE-2009-2616

The CVE-2009-2616 vulnerability concerns DataCheck Solutions SitePal 1.x, where a flaw in z_admin_login.asp enables remote execution of arbitrary SQL commands via unspecified vectors. The available sources confirm an SQL injection in the login component but do not specify affected versions beyond...

CVE-2009-2615: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 zadminlogin.asp, 2 zforgot.asp, and possibly unspecified other components. NOTE: the provenance of this information is...

CVE-2009-2616: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in zadminlogin.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...