PT-2011-1831

Name of the Vulnerable Software and Affected Versions Member Management System version 4.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the REF URL parameter in the admin/index.a...

CVE-2010-4896: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/index.asp in Member Management System 4.0 allows remote attackers to inject arbitrary web script or HTML via the REFURL parameter...

CVE-2009-4721

Multiple SQL injection vulnerabilities in Admin/index.asp in Andrews-Web A-W BannerAd 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 User and 2 Password parameters. NOTE: some of these details are obtained from third party information...

CVE-2009-4721

CVE-2009-4721 affects Andrews-Web (A-W) BannerAd 1.0, with multiple SQL injection vulnerabilities in Admin/index.asp that allow remote attackers to execute arbitrary SQL commands via the (1) User and (2) Password parameters. The root cause is unsafely constructed SQL queries in that page, enablin...

CVE-2009-4721: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Admin/index.asp in Andrews-Web A-W BannerAd 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 User and 2 Password parameters. NOTE: some of these details are obtained from third party information...

AW BannerAd - Authentication Bypass

AW BannerAd - Authentication Bypass AW-BannerAd Login ByPass By JxE-13 Ro0T-MaFia Sistema : AW-BannerAd,Asp Scripts Archivo : adv/admin/index.asp User&Pass:' or 'x'='x :' or 'x'='x milw0rm.com 2009-08-03...

Sql injection

Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execute arbitrary SQL commands via the 1 login and 2 senha parameters...

CVE-2009-2142

CVE-2009-2142 affects Zip Store Chat (versions 4.0 and 5.0) via admin/index.asp. Multiple SQL injection vulnerabilities enable remote attackers to modify or query backend databases by supplying crafted values in the (1) login and (2) senha parameters. The CVE entry cites arbitrary SQL execution a...

CVE-2009-2142: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execute arbitrary SQL commands via the 1 login and 2 senha parameters...

CVE-2006-2674: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 frmid parameter to a showforum.asp, 2 a search field to b forumsearch.asp, 3 Email address or 4 Password to c admin/index.asp, 5 frmcatid parameter to d...