Lucene search
K

5 matches found

NVD
NVD
added 2010/03/18 6:30 p.m.10 views

CVE-2009-4721

Multiple SQL injection vulnerabilities in Admin/index.asp in Andrews-Web A-W BannerAd 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 User and 2 Password parameters. NOTE: some of these details are obtained from third party information...

7.5CVSS8.5AI score0.00466EPSS
Exploits0References3
CVE
CVE
added 2010/03/18 6:0 p.m.39 views

CVE-2009-4721

CVE-2009-4721 affects Andrews-Web (A-W) BannerAd 1.0, with multiple SQL injection vulnerabilities in Admin/index.asp that allow remote attackers to execute arbitrary SQL commands via the (1) User and (2) Password parameters. The root cause is unsafely constructed SQL queries in that page, enablin...

7.5CVSS8.8AI score0.00466EPSS
Exploits0References3Affected Software1
exploitpack
exploitpack
added 2009/08/03 12:0 a.m.20 views

AW BannerAd - Authentication Bypass

AW BannerAd - Authentication Bypass AW-BannerAd Login ByPass By JxE-13 Ro0T-MaFia Sistema : AW-BannerAd,Asp Scripts Archivo : adv/admin/index.asp User&Pass:' or 'x'='x :' or 'x'='x milw0rm.com 2009-08-03...

1.4AI score
Exploits0
Prion
Prion
added 2009/06/22 2:30 p.m.9 views

Sql injection

Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execute arbitrary SQL commands via the 1 login and 2 senha parameters...

7.5CVSS9.3AI score0.00338EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2009/06/22 2:0 p.m.40 views

CVE-2009-2142

CVE-2009-2142 affects Zip Store Chat (versions 4.0 and 5.0) via admin/index.asp. Multiple SQL injection vulnerabilities enable remote attackers to modify or query backend databases by supplying crafted values in the (1) login and (2) senha parameters. The CVE entry cites arbitrary SQL execution a...

7.5CVSS8.8AI score0.00338EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder