ablespace 1.0 - Cross-Site Scripting Blind SQL Injection

ablespace 1.0 - Cross-Site Scripting Blind SQL Injection riginal advisory: http://dsecrg.com/pages/vul/show.php?id=137 Digital Security Research Group DSecRG Advisory DSECRG-09-037 Application: AbleSpace Versions Affected: 1.0 Vendor URL: http://abk-soft.com/ Bugs: Multiple Blind SQL Injections,...

AbleSpace 1.0 (XSS/BSQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== AbleSpace 1.0 XSS/BSQL Multiple Remote Vulnerabilities ======================================================== riginal advisory: http://dsecrg.com/pages/vul/show.php?id=137 Digital...

AbleSpace 1.0 (XSS/BSQL) Multiple Remote Vulnerabilities

No description provided by source. riginal advisory: http://dsecrg.com/pages/vul/show.php?id=137 Digital Security Research Group DSecRG Advisory DSECRG-09-037 Application: AbleSpace Versions Affected: 1.0 Vendor URL: http://abk-soft.com/ Bugs: Multiple Blind SQL Injections, Multiple XSS Exploits:...

AbleSpace 1.0 - adv_cat.php Cross-Site Scripting

AbleSpace 1.0 - advcat.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30864/info AbleSpace is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code ...

AbleSpace 1.0 - 'adv_cat.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30864/info AbleSpace is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Sql injection

SQL injection vulnerability in advcat.php in AbleSpace 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-2491

SQL injection vulnerability in advcat.php in AbleSpace 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-2491

CVE-2008-2491 corresponds to a SQL injection vulnerability in the AdvCat component of AbleSpace 1.0, specifically in adv_cat.php where the cat_id parameter is unsafely used in SQL queries. Multiple sources (NVD, CVE lists, PRION) document that remote attackers can execute arbitrary SQL commands t...

CVE-2008-2491

SQL injection vulnerability in advcat.php in AbleSpace 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Ablespace 1.0 'cat_id' Parameter SQL Injection Vulnerability

By : s3rv3rhack3r Ali Jasbi Vendor : abk-soft.com Name : ablespace version : All Version Risk : Very high ++++++++++++++++++++++++++++++++++++++++++++ advcat.php if!empty$GET'catid' $str = ''; DB::query"select from advcats where id=".tosqlgetparam'catid',"Number";...

AbleSpace 1.0 - adv_cat.php SQL Injection

AbleSpace 1.0 - advcat.php SQL Injection source: https://www.securityfocus.com/bid/29369/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

AbleSpace 1.0 - 'adv_cat.php' SQL Injection

source: https://www.securityfocus.com/bid/29369/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...