Parodia 6.8 employer-profile.asp Blind SQL Injection Vulnerability

Exploit for asp platform in category web applications Exploit Title: Parodia 6.8 and early SQL injection Date: June 24 2012 Exploit Author:Carlos Mario Penagos Hollmann Vendor Homepage: http://www.parodia.net/ Version: 6.8 CVE : CVE-2011-2751 http://server/' --- blind SQL...

CVE-2006-1005

CVE-2006-1005 affects Parodia 6.2 and earlier. The issue is an information disclosure: remote attackers can cause an SQL error by supplying an invalid AG_ID parameter in agencyprofile.asp, which may reveal sensitive information. The vulnerability is described consistently across NVD/Red Hat/NVD m...

CVE-2006-1004: Undefined Security Weakness

Cross-site scripting XSS vulnerability in agencyprofile.asp in Parodia 6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the AGID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1005: Undefined Security Weakness

agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AGID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...