Directory traversal

SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as demonstrated by a large directory traversal sequence, which reveals the installation path in an error message...

CVE-2015-2997

SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as demonstrated by a large directory traversal sequence, which reveals the installation path in an error message...

CVE-2015-2997: Exposure of Sensitive Information to an Unauthorized Actor

SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as demonstrated by a large directory traversal sequence, which reveals the installation path in an error message...

PT-2015-6041

Name of the Vulnerable Software and Affected Versions SysAid Help Desk versions prior to 15.2 Description The issue allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to the getAgentLogFile endpoint. This can be achieved by providing a large...

Solarwinds Orion AccountManagement.asmx GetAccounts Admin Creation

This module exploits a stacked SQL injection in order to add an administrator user to the SolarWinds Orion database. Module Options msf use auxiliary/gather/solarwinds/orionsqli msf undefinedorionsqli show actions ...actions... msf undefinedorionsqli set ACTION msf undefinedorionsqli show options...

Sql injection

SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

CVE-2008-6889

SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

CVE-2008-6889

The CVE-2008-6889 entry describes an SQL injection vulnerability in Merchantsadd.asp of ASPReferral 5.3. The flaw allows remote attackers to execute arbitrary SQL commands by supplying a crafted AccountID parameter, enabling potential unauthorized access or data manipulation. The NVD metrics indi...

CVE-2008-6889

SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

CVE-2008-6889: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

CVE-2008-5365

SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

Sql injection

SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

CVE-2008-5365

Summary: CVE-2008-5365 is a SQL injection vulnerability in VoteHistory.asp of ActiveWebSoftwares ActiveVotes 2.2. The issue arises from unsafely handling the AccountID parameter, enabling remote attackers to execute arbitrary SQL commands. This is documented across multiple sources (NVD, CVE reco...

CVE-2008-5365

SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

CVE-2008-5365: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...

ASPReferral 5.3 (AccountID) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= ASPReferral 5.3 AccountID Blind SQL Injection Vulnerability ============================================================= Tybe:Merchantsadd.asp AccountID Blind SQL Injection...

ActiveVotes 2.2 (AccountID) Blind SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:VoteHistory.asp AccountID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: ActiveVotes v 2.2 author: я3d D3v!L Date: 28.11.2008...

ActiveVotes 2.2 - AccountID Blind SQL Injection

ActiveVotes 2.2 - AccountID Blind SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:VoteHistory.asp AccountID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: ActiveVotes v 2.2 author: я3d D3v!L Dat...

ASPReferral 5.3 - AccountID Blind SQL Injection

ASPReferral 5.3 - AccountID Blind SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Merchantsadd.asp AccountID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: ASPReferral author: я3d D3v!L Date:...

ASPReferral 5.3 - 'AccountID' Blind SQL Injection

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Merchantsadd.asp AccountID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: ASPReferral author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...