CVE-2008-1224

CVE-2008-1224 is an XSS vulnerability affecting the BosClassifieds Classified Ads System 3.0, specifically in the account.php script where user-supplied input in the returnTo parameter can be used to inject arbitrary web script or HTML. The issue is described as a cross-site scripting flaw that c...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 r parameter to a forgotuid.php, the 2 query or 3 sk parameter to b searchresults.php, or 4 the pageId parameter to c websitepage.php...

CVE-2007-4078

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 r parameter to a forgotuid.php, the 2 query or 3 sk parameter to b searchresults.php, or 4 the pageId parameter to c websitepage.php...

CVE-2007-4078

CVE-2007-4078 concerns multiple XSS vulnerabilities in AlstraSoft Text Ads Enterprise. The affected components are web pages handling user input: forgot_uid.php (r parameter), search_results.php (query or sk parameters), and website_page.php (pageId parameter). The root cause is improper input va...

CVE-2007-4078

Multiple cross-site scripting XSS vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the 1 r parameter to a forgotuid.php, the 2 query or 3 sk parameter to b searchresults.php, or 4 the pageId parameter to c websitepage.php...

alstrasoft-multi.txt

AlstraSoft Multiple products multiple Vulnerabilities Vendor urL:http://www.alstrasoft.com/products.htm Advisore url:http://lostmon.blogspot.com/2007/07/ alstrasoft-multiple-products-multiple.html Vendor notify:yes webform Exploit included: yes Multiple products of Alstrasoft Are prone vulnerable...

Sql injection

SQL injection vulnerability in detailsnews.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the idnew parameter...

CVE-2007-3583

SQL injection vulnerability in detailsnews.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the idnew parameter...

CVE-2007-3583

CVE-2007-3583 affects Girlserv ads up to version 1.5. The vulnerability is an SQL injection in details_news.php, exploitable via the idnew parameter, allowing remote attackers to execute arbitrary SQL commands. Connected sources corroborate the affected component and the injection vector; no reme...

CVE-2007-3583

SQL injection vulnerability in detailsnews.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the idnew parameter...

Girlserv ads <= 1.5 (details_news.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Girlserv ads = 1.5 detailsnews.php SQL Injection Vulnerability ================================================================== Girlserv ads = 1.5 Remote SQL Injection...

Girlserv ads 1.5 - 'details_news.php' SQL Injection

Girlserv ads = 1.5 Remote SQL Injection Vulnerability Found By : Cold z3ro , [email protected] Homepages : http://hackteach.org , http://h4ps.com Script : http://www.girlserv-demo.com/girlserv-ads1.5.zip For Admin :...

CVE-2007-0520

SQL injection vulnerability in banner.php in Unique Ads UDS 1.x allows remote attackers to execute arbitrary SQL commands via the bid parameter...

CVE-2007-0520

The CVE-2007-0520 entry describes a SQL injection in banner.php of Unique Ads (UDS) 1.x, exploitable via the bid parameter to execute arbitrary SQL commands remotely. This vulnerability is confirmed by multiple sources (NVD entry and related references) and is categorized with network attack vect...

CVE-2007-0520

SQL injection vulnerability in banner.php in Unique Ads UDS 1.x allows remote attackers to execute arbitrary SQL commands via the bid parameter...

SQL Injection in Unique Ads &#40; UDS &#41;

Hello Vulnerable : uds Version: 1.x web : http://www.egyptechno.com The bug : http://example.com/uds/banner.php?bid=SQL Example : http://example.com/uds/banner.php?bid=-5520union20select20null,null,null20from20uds ,,,,,,, Discoverey By : LinuxDrox www.LeZr.com Best Regards ,,...

Unique Ads - Banner.php SQL Injection

Unique Ads - Banner.php SQL Injection source: https://www.securityfocus.com/bid/22164/info Unique Ads is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Unique Ads - 'Banner.php' SQL Injection

source: https://www.securityfocus.com/bid/22164/info Unique Ads is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

CVE-2006-6461

tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2508...

CVE-2006-6461

CVE-2006-6461 affects tr1.php in Yourfreeworld Stylish Text Ads Script. The vulnerability allows remote attackers to obtain the installation path via an invalid id parameter, disclosed in an error message. The entry notes this issue may be related to CVE-2006-2508; the provided documents do not i...