CVE-2010-4861

CVE-2010-4861 is a SQL injection in webSPELL 4.2.1 affecting the asearch.php script. The vulnerability allows remote attackers to pass the search parameter to trigger arbitrary SQL execution. Documented details indicate a network-accessible issue with no authentication required and partial confid...

PT-2011-1796

Name of the Vulnerable Software and Affected Versions webSPELL version 4.2.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the search parameter in the "asearch.php" file. Recommendations For webSPELL version 4.2.1, update to a newer version...

CVE-2010-4861: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter...

webSPELL 4.2.1 asearch.php SQL Injection

INFORMATION +Name : webspell 4.2.1 asearch.php SQL Injection Vulnerability +Author : silent vapor +Date : 29.09.2010 +Script : webspell 4.2.1 +Price : free +Language :PHP +Discovered by silent vapor +Underground Agents +Greetz to Team-Internet, 4004-Security-Project, Easy Laster +Vulnerability :...

Webspell 4.2.1 - asearch.php SQL Injection

Webspell 4.2.1 - asearch.php SQL Injection INFORMATION +Name : webspell 4.2.1 asearch.php SQL Injection Vulnerability +Author : silent vapor +Date : 29.09.2010 +Script : webspell 4.2.1 +Price : free +Language :PHP +Discovered by silent vapor +Underground Agents +Greetz to Team-Internet,...

Webspell 4.2.1 - 'asearch.php' SQL Injection

INFORMATION +Name : webspell 4.2.1 asearch.php SQL Injection Vulnerability +Author : silent vapor +Date : 29.09.2010 +Script : webspell 4.2.1 +Price : free +Language :PHP +Discovered by silent vapor +Underground Agents +Greetz to Team-Internet, 4004-Security-Project, Easy Laster +Vulnerability :...