2 Vuln.

Secure XSS vuln. Vuln. discovered by : r0t Date: 25 July 2007 vendor:http://www.formfields.com/secureArea/secureProduct.php orginal advisory: http://pridels-team.blogspot.com/2007/07/secure-xss-vuln.html affected versions:v1.0.20070629 and previous Secure contains a flaw that allows a remote...

Sql injection

SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionsoffset parameter...

CVE-2006-1374

SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionsoffset parameter...

Design/Logic Flaw

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via 1 a blank campaignId parameter to editCampaign.php and 2 a blank schemeId parameter to viewPricingScheme.php...

CVE-2006-1375

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via 1 a blank campaignId parameter to editCampaign.php and 2 a blank schemeId parameter to viewPricingScheme.php...

CVE-2006-1374

CVE-2006-1374 concerns an SQL injection in AdMan 1.0.20051221 and earlier. The vulnerability is in viewStatement.php via the transactions_offset parameter, allowing remote attackers to execute arbitrary SQL commands. Affected product: AdMan (version 1.0.20051221 and earlier). Root cause: unvalida...

CVE-2006-1374

SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactionsoffset parameter...

CVE-2006-1375

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via 1 a blank campaignId parameter to editCampaign.php and 2 a blank schemeId parameter to viewPricingScheme.php...

CVE-2006-1375

CVE-2006-1375 affects AdMan 1.0.20051221 and earlier. The vulnerability allows remote attackers to obtain the full server path via (1) a blank campaignId parameter to editCampaign.php and (2) a blank schemeId parameter to viewPricingScheme.php. Affected components are the PHP scripts handling cam...

AdMan v1.0.x SQL vuln

AdMan v1.0.x SQL vuln Vuln. discovered by : r0t Date: 23 march 2006 vendor:www.formfields.com/adManArea/ affected versions: v1.0.20051221 and prior orginal advisory: http://pridels.blogspot.com/2006/03/adman-v10x-sql-vuln.html SQL vuln. AdMan contains a flaw that allows a remote sql injection...

AdMan 1.0.20051221 - ViewStatement.php SQL Injection

AdMan 1.0.20051221 - ViewStatement.php SQL Injection source: https://www.securityfocus.com/bid/17208/info AdMan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful...

AdMan 1.0.20051221 - 'ViewStatement.php' SQL Injection

source: https://www.securityfocus.com/bid/17208/info AdMan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...