CVE-2011-3340

CVE-2011-3340 affects Netvolution CMS 2.5.8 (ASP) where the HTTP Referer header parsing allows blind SQL injection. The vulnerability enables remote attackers to alter content, exfiltrate data (usernames, plaintext passwords), and potentially execute commands on the database server without authen...

CVE-2011-3340: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header...

CVE-2009-5102: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL commands via the bpenid parameter...

CVE-2009-5103: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the email variable...

CVE-2010-4966: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML via the query parameter in a Search action...

CVE-2010-4967: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artID parameter...

PT-2011-1902

Name of the Vulnerable Software and Affected Versions ATCOM Netvolution version 2.5.6 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the artID parameter in the "default.asp" file. Recommendations For ATCOM Netvolution version 2.5....

PT-2011-1352

Name of the Vulnerable Software and Affected Versions ATCOM Netvolution version 1.0 ASP Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML via the email variable. This can potentially lead to...

PT-2011-1351

Name of the Vulnerable Software and Affected Versions ATCOM Netvolution version 1.0 ASP Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the bpe nid parameter in the "default.asp" file. Recommendations For ATCOM Netvolution version 1.0 ASP,...

PT-2011-4394

Name of the Vulnerable Software and Affected Versions ATCOM Netvolution version 2.5.8 Description The issue allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header, potentially leading to unauthorized data access or modification. Recommendations For ATCOM Netvolution...

PT-2011-1901

Name of the Vulnerable Software and Affected Versions ATCOM Netvolution affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the query parameter in a...

Netvolution referer header SQL injection vulnerability

Netvolution CMS v2.5.8 is vulnerable to a blind SQL injection attack in the HTTP “referer” header. A malicious user may utilize this vulnerability to modify content on the vulnerable website, inject malicious javascript code to a visitor’s browser, collect CMS usernames and plaintext passwords an...

Netvolution CMS 2.5.8 Blind SQL Injection

Netvolution CMS v2.5.8 is vulnerable to a blind SQL injection attack in the HTTP “referer” header. A malicious user may utilize this vulnerability to modify content on the vulnerable website, inject malicious javascript code to a visitor’s browser, collect CMS usernames and plaintext passwords an...

ProCheckUp Security Advisory 2006.14

PR06-14: IP Phones based on Centrality Communications/Aredfox PA168 chipset weak session management vulnerability This advisory has been published following consultation with UK NISCC http://www.niscc.gov.uk/ Date Found: 3rd November 2006 Date Public: 22nd January 2007 Vulnerable: Phones confirme...

PA168 Chipset IP Phones Weak Session Management Exploit

No description provided by source. !/bin/bash PR06-14: IP Phones based on Centrality Communications/Aredfox PA168 chipset weak session management vulnerability Author: Adrian Pastor adrian.pastor-AT-procheckup.com from ProCheckUp This advisory has been published following consultation with UK NIS...