CVE-2005-4233

SQL injection vulnerability in advertiserstatistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the adnumber parameter...

CVE-2005-4233

The CVE-2005-4233 entry describes an SQL injection vulnerability in advertiser_statistic.php for Ad Manager Pro 2.0 and earlier, where the ad_number parameter can be manipulated to execute arbitrary SQL commands. The vulnerability is exploitable remotely, leading to potential data exposure or mod...

CVE-2005-4233

SQL injection vulnerability in advertiserstatistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the adnumber parameter...

PHP Web Scripts Ad Manager Pro 2.0 - Advertiser_statistic.php SQL Injection

PHP Web Scripts Ad Manager Pro 2.0 - Advertiserstatistic.php SQL Injection source: https://www.securityfocus.com/bid/15847/info Ad Manager Pro is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in ...

PHP Web Scripts Ad Manager Pro 2.0 - 'Advertiser_statistic.php' SQL Injection

source: https://www.securityfocus.com/bid/15847/info Ad Manager Pro is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Ad Manager Pro SQL vuln.

Ad Manager Pro SQL vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ad-manager-pro-sql-vuln.html vendor:www.phpwebscripts.com/admanagerpro/ affected version:2.0 and prior Product Description: Quality ad management system. Graphical or text-bas...

CVE-2005-3876

CVE-2005-3876 affects AD Center ADC2000 NG Pro 1.2 and NG Pro Lite. Multiple SQL injection vulnerabilities exist in adcbrowres.php that allow remote attackers to execute arbitrary SQL commands via the (1) cat and (2) lang parameters. The vulnerability details are documented in the NVD entry; no e...

CVE-2005-3876

Multiple SQL injection vulnerabilities in adcbrowres.php in AD Center ADC2000 NG Pro 1.2 and NG Pro Lite allow remote attackers to execute arbitrary SQL commands via the 1 cat and 2 lang parameters...

Baby Web Server 2.6.2 - Command Validation

Baby Web Server 2.6.2 - Command Validation !/bin/perl Baby Web Server Command Validation Exploit -------------------------------------------------- Infam0us Gr0up - Securiti Research E:\nc -v localhost 80 Infam0us-Gr0up 127.0.0.1 80 http open GET HTTP HTTP/1.0 400 Bad Request Server: Baby Web...

CVE-2005-1786

Summary (CVE-2005-1786): FunkyASP AD System 1.1 is affected by an SQL injection in the admin.asp file, exploitable via the password parameter to execute arbitrary SQL and gain privileges. The vulnerability is described across multiple records (CVE/NT NVD entries and PT-2005-2754). The exploitatio...

CVE-2005-1786

SQL injection vulnerability in admin.asp in FunkyASP AD System 1.1 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password parameter...

PT-2005-2753 · Zongg · Zongg

Name of the Vulnerable Software and Affected Versions: ZonGG version 1.2 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the password parameter in the "ad/login.asp" endpoint. Recommendations: For ZonGG version 1.2, avoid using th...

CVE-2005-1786

SQL injection vulnerability in admin.asp in FunkyASP AD System 1.1 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password parameter...

PT-2005-2754 · Funkyasp · Funkyasp Ad System

Name of the Vulnerable Software and Affected Versions: FunkyASP AD System version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands and gain privileges. This is achieved via the password parameter in the admin.asp file. Recommendations: For FunkyASP AD System...

GLSA-200504-13 : OpenOffice.Org: DOC document Heap Overflow

The remote host is affected by the vulnerability described in GLSA-200504-13 OpenOffice.Org: DOC document Heap Overflow AD-LAB has discovered a heap overflow in the 'StgCompObjStream::Load' function when processing DOC documents. Impact : An attacker could design a malicious DOC document containi...

[SECURITYREASON.COM] phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9 Author: Maksymilian Arciemowicz cXIb8O3 Date: 13.3.2005 from securityreason.com TEAM - --- 0.Description --- phpAdsNew is an open-source ad server, with an integrated banner management interface a...

CVE-1999-1520

A configuration problem in the Ad Server Sample directory AdSamples in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information...

CVE-1999-1520

The CVE-1999-1520 issue is a configuration problem in the Ad Server Sample directory (AdSamples) of Microsoft Site Server 3.0. The root cause is misconfiguration that allows an attacker to obtain the SITE.CSC file, exposing sensitive SQL database information. Affected software: Microsoft Site Ser...

Digi-news and Digi-ads version 1.1 admin access without password

Digi-news and Digi-ads version 1.1 admin access without password .oO Overview Oo. Digi-news and Digi-ads version 1.1 admin access without password Discovered on 2003, March, 30th Vendor: Digi-FX Digi-news 1.1 is a PHP news editor. It allows you to easily add, edit, and delete news. Digi-ad 1.1 is...

CVE-2003-0208

CVE-2003-0208 describes an XSS vulnerability in Macromedia Flash ad user tracking, exploitable via the clickTAG field to inject arbitrary JavaScript. Affected component: Flash ad-tracking capability; root cause: input in clickTAG not properly sanitized. Impact (per provided metrics): partial inte...