CVE-2008-6041

Multiple cross-site scripting XSS vulnerabilities in Index.asp in Dataspade 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 ViewName, 2 TableName, 3 OrderBy, and 4 FilterField parameters...

CVE-2008-6041: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Index.asp in Dataspade 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 ViewName, 2 TableName, 3 OrderBy, and 4 FilterField parameters...

CVE-2008-5893

Cross-site scripting XSS vulnerability in admindblayers.asp in ClickAndEmail allows remote attackers to inject arbitrary web script or HTML via the tablename parameter in an update action...

Cross site scripting

Cross-site scripting XSS vulnerability in admindblayers.asp in ClickAndEmail allows remote attackers to inject arbitrary web script or HTML via the tablename parameter in an update action...

CVE-2008-5893: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admindblayers.asp in ClickAndEmail allows remote attackers to inject arbitrary web script or HTML via the tablename parameter in an update action...

CVE-2008-0738: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in CandyPress CP 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the 1 idcust parameter to a ajaxgetTiers.asp and b ajaxgetCust.asp in ajax/, and the 2 tableName parameter to c ajax/ajaxtableFields.asp. NOTE...