CVE-2009-1315

Multiple cross-site scripting XSS vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 gid parameter to groupsprofile.php, 2 catid and 3 razdid parameters to advcat.php, and the 4 URL to blogsfull.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 gid parameter to groupsprofile.php, 2 catid and 3 razdid parameters to advcat.php, and the 4 URL to blogsfull.php...

CVE-2009-1315

Multiple cross-site scripting XSS vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 gid parameter to groupsprofile.php, 2 catid and 3 razdid parameters to advcat.php, and the 4 URL to blogsfull.php...

Sql injection

SQL injection vulnerability in advcat.php in AbleSpace 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-2491

CVE-2008-2491 corresponds to a SQL injection vulnerability in the AdvCat component of AbleSpace 1.0, specifically in adv_cat.php where the cat_id parameter is unsafely used in SQL queries. Multiple sources (NVD, CVE lists, PRION) document that remote attackers can execute arbitrary SQL commands t...

ablespace-sql.txt

By : s3rv3rhack3r Ali Jasbi Vendor : abk-soft.com Name : ablespace version : All Version Risk : Very high ++++++++++++++++++++++++++++++++++++++++++++ advcat.php if!empty$GET'catid' $str = ''; DB::query"select from advcats where id=".tosqlgetparam'catid',"Number";...

Ablespace 1.0 'cat_id' Parameter SQL Injection Vulnerability

By : s3rv3rhack3r Ali Jasbi Vendor : abk-soft.com Name : ablespace version : All Version Risk : Very high ++++++++++++++++++++++++++++++++++++++++++++ advcat.php if!empty$GET'catid' $str = ''; DB::query"select from advcats where id=".tosqlgetparam'catid',"Number";...

AbleSpace 1.0 - adv_cat.php SQL Injection

AbleSpace 1.0 - advcat.php SQL Injection source: https://www.securityfocus.com/bid/29369/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

AbleSpace 1.0 - 'adv_cat.php' SQL Injection

source: https://www.securityfocus.com/bid/29369/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...