Multiple Ad Server Solutions Products 'logon_processing.jsp' SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/32782/info Multiple Ad Server Solutions products are prone to SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allo...

Calendar Scripts A.M.Y. Ad Management Software 1.4 Persistent XSS Vulnerability

Exploit for php platform in category web applications Advisory:Calendar Scripts A.M.Y. Ad Management Software 1.4 Persistent XSS Vulnerability Version:1.4 Vendor URL: http://calendarscripts.info/ Demo Link:http://demo.pimteam.net/amy/admin.php Author: Viknesvaran Sittaramane Category: Webapp...

Calendar Scripts A.M.Y 1.4 Cross Site Scripting

Advisory:Calendar Scripts A.M.Y. Ad Management Software 1.4 Persistent XSS Vulnerability Version:1.4 Vendor URL: http://calendarscripts.info/ Demo Link:http://demo.pimteam.net/amy/admin.php Author: Viknesvaran Sittaramane Category: Webapp Twiiter: https://twitter.com/csvsn ........... Product...

Sql injection

SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...

CVE-2008-6365

SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...

CVE-2008-6365

CVE-2008-6365 describes a SQL injection vulnerability in Ad Server Solutions’ Ad Management Software (Java) affecting logon.jsp and related logon_processing.jsp. The issue can allow remote attackers to modify/execute SQL via the uname/pass parameters. Root cause per description is improper handli...

CVE-2008-6365: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...

Multiple Ad Server Solutions Products - 'logon_processing.jsp' SQL Injection

source: https://www.securityfocus.com/bid/32782/info Multiple Ad Server Solutions products are prone to SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

Multiple Ad Server Solutions Products - logon_processing.jsp SQL Injection

Multiple Ad Server Solutions Products - logonprocessing.jsp SQL Injection source: https://www.securityfocus.com/bid/32782/info Multiple Ad Server Solutions products are prone to SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL...