aig-mssql.txt

Absolute Image Gallery Gallery.ASP categoryid MSSQL Injection Exploit Type : SQL Injection Release Date : 2007-03-15 Product / Vendor : Absolute Image Gallery http://www.xigla.com/absoluteig/ Bug : http://localhost/script/gallery.asp?action=viewimage&categoryid=-SQL Inj-...

Sql injection

SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action...

CVE-2007-1469

SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action...

CVE-2007-1469

SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action...

CVE-2007-1469

CVE-2007-1469 describes an SQL injection in the gallery.asp component of Absolute Image Gallery 2.0. The vulnerability is triggered via the categoryid parameter in a viewimage action, allowing remote attackers to execute arbitrary SQL commands. The entry is supported by NVD and CVE records, which...

Absolute Image Gallery Gallery.ASP (categoryid) MSSQL Injection Exploit

Absolute Image Gallery Gallery.ASP categoryid MSSQL Injection Exploit Type : SQL Injection Release Date : 2007-03-15 Product / Vendor : Absolute Image Gallery http://www.xigla.com/absoluteig/ Bug : http://localhost/script/gallery.asp?action=viewimage&categoryid=-SQL Inj-...

CVE-2007-1469: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action...

Absolute Image Gallery 2.0 - gallery.asp?categoryId SQL Injection

Absolute Image Gallery 2.0 - gallery.asp?categoryId SQL Injection Absolute Image Gallery Gallery.ASP categoryid MSSQL Injection Exploit Type : SQL Injection Release Date : 2007-03-15 Product / Vendor : Absolute Image Gallery http://www.xigla.com/absoluteig/ Bug :...

Absolute Image Gallery 2.0 (gallery.php categoryid) SQL Injection Vuln

Exploit for asp platform in category web applications ====================================================================== Absolute Image Gallery 2.0 gallery.php categoryid SQL Injection Vuln ====================================================================== Absolute Image Gallery Gallery.A...

Absolute Image Gallery 2.0 (gallery.php categoryid) SQL Injection Vuln

No description provided by source. Absolute Image Gallery Gallery.ASP categoryid MSSQL Injection Exploit Type : SQL Injection Release Date : 2007-03-15 Product / Vendor : Absolute Image Gallery http://www.xigla.com/absoluteig/ Bug :...

Absolute Image Gallery 2.0 - 'gallery.asp?categoryId' SQL Injection

Absolute Image Gallery Gallery.ASP categoryid MSSQL Injection Exploit Type : SQL Injection Release Date : 2007-03-15 Product / Vendor : Absolute Image Gallery http://www.xigla.com/absoluteig/ Bug : http://localhost/script/gallery.asp?action=viewimage&categoryid=-SQL Inj-...

CVE-2007-1138

Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...

CVE-2007-1138

Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...

Path traversal

Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...

CVE-2007-1138

CVE-2007-1138 affects Cromosoft Simple Plantilla PHP (SPP). A vulnerability in list_main_pages.php allows absolute path traversal via the nfolder parameter, enabling remote attackers to list arbitrary directories and read arbitrary files. The issue is rooted in an improper handling of absolute pa...

CVE-2007-1138

Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...

PT-2007-1294 · Jobline · Jobline

Name of the Vulnerable Software and Affected Versions: Jobline version 1.1.1 Description: A remote file inclusion issue exists, allowing remote attackers to execute arbitrary code via a URL in the mosConfig absolute path parameter in the admin.jobline.php script. Recommendations: For Jobline...

Stack overflow

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

CVE-2007-0018

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

CVE-2007-0018

CVE-2007-0018 is a stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), triggered by an overly long argument to the SetFormatLikeSample() function. The flaw is a data validation failure that allows remote code execution when a user visits a malicious web...