CVE-2009-1315

Multiple cross-site scripting XSS vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 gid parameter to groupsprofile.php, 2 catid and 3 razdid parameters to advcat.php, and the 4 URL to blogsfull.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 gid parameter to groupsprofile.php, 2 catid and 3 razdid parameters to advcat.php, and the 4 URL to blogsfull.php...

CVE-2009-1315

Multiple cross-site scripting XSS vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 gid parameter to groupsprofile.php, 2 catid and 3 razdid parameters to advcat.php, and the 4 URL to blogsfull.php...

CVE-2009-1315: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 gid parameter to groupsprofile.php, 2 catid and 3 razdid parameters to advcat.php, and the 4 URL to blogsfull.php...

Sql injection

SQL injection vulnerability in advcat.php in AbleSpace 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-2491

CVE-2008-2491 corresponds to a SQL injection vulnerability in the AdvCat component of AbleSpace 1.0, specifically in adv_cat.php where the cat_id parameter is unsafely used in SQL queries. Multiple sources (NVD, CVE lists, PRION) document that remote attackers can execute arbitrary SQL commands t...

CVE-2008-2491: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in advcat.php in AbleSpace 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Ablespace 1.0 'cat_id' Parameter SQL Injection Vulnerability

By : s3rv3rhack3r Ali Jasbi Vendor : abk-soft.com Name : ablespace version : All Version Risk : Very high ++++++++++++++++++++++++++++++++++++++++++++ advcat.php if!empty$GET'catid' $str = ''; DB::query"select from advcats where id=".tosqlgetparam'catid',"Number";...

ablespace-sql.txt

By : s3rv3rhack3r Ali Jasbi Vendor : abk-soft.com Name : ablespace version : All Version Risk : Very high ++++++++++++++++++++++++++++++++++++++++++++ advcat.php if!empty$GET'catid' $str = ''; DB::query"select from advcats where id=".tosqlgetparam'catid',"Number";...

AbleSpace 1.0 - adv_cat.php SQL Injection

AbleSpace 1.0 - advcat.php SQL Injection source: https://www.securityfocus.com/bid/29369/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

AbleSpace 1.0 - 'adv_cat.php' SQL Injection

source: https://www.securityfocus.com/bid/29369/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...