EUVD-2006-1700

Malware in sbrugna...

CVE-2016-10114

SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch...

CVE-2016-10114

CVE-2016-10114 describes a SQL injection vulnerability in the Joomla! extension "aWeb Cart Watching System for Virtuemart" (versions before 2.6.1). The flaw allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch. Affected product is the aWeb...

Joomla aWeb Cart Watching System For Virtuemart 2.6.0 SQL Injection

Exploit Title: Sqli Blind Timebased on Joomla + Viertuemart + aweb-cartwatching-system/aweb-cartwatching = 2.6.0 Date: 28-12-2016 Software Link: http://awebsupport.com/products/aweb-cartwatching-system Exploit Author: Javi Espejoqemm Contact: http://twitter.com/javiespejo Website:...

Joomla! Component aWeb Cart Watching System for Virtuemart 2.6.0 - SQL Injection

Exploit Title: Sqli Blind Timebased on Joomla + Viertuemart + aweb-cartwatching-system/aweb-cartwatching = 2.6.0 Date: 28-12-2016 Software Link: http://awebsupport.com/products/aweb-cartwatching-system Exploit Author: Javi Espejoqemm Contact: http://twitter.com/javiespejo Website:...

Joomla! Component aWeb Cart Watching System for Virtuemart 2.6.0 - SQL Injection

Joomla! Component aWeb Cart Watching System for Virtuemart 2.6.0 - SQL Injection Exploit Title: Sqli Blind Timebased on Joomla + Viertuemart + aweb-cartwatching-system/aweb-cartwatching = 2.6.0 Date: 28-12-2016 Software Link: http://awebsupport.com/products/aweb-cartwatching-system Exploit Author...

CVE-2007-1247

Multiple PHP remote file inclusion vulnerabilities in aWeb Labs aWebNews 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the pathtonews parameter to 1 listing.php or 2 visview.php...

CVE-2007-1247

Multiple PHP remote file inclusion vulnerabilities in aWeb Labs aWebNews 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the pathtonews parameter to 1 listing.php or 2 visview.php...

CVE-2007-1247

CVE-2007-1247 (CVE-2007-1247) : Affects aWeb Labs aWebNews 1.5 . The vulnerability consists of multiple PHP remote file inclusion weaknesses that let remote attackers execute arbitrary PHP code by supplying a URL in the path_to_news parameter to either listing.php or visview.php . This is a code ...

[SA19626] Aweb Scripts Seller Payment Bypass Security Issue

TITLE: Aweb Scripts Seller Payment Bypass Security Issue SECUNIA ADVISORY ID: SA19626 VERIFY ADVISORY: http://secunia.com/advisories/19626/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Aweb Scripts Seller http://secunia.com/product/9350/ DESCRIPTION: benozor7...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode...

CVE-2006-1699

Cross-site scripting XSS vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode...

CVE-2006-1700

Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote attackers to bypass authentication...

Authentication flaw

Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote attackers to bypass authentication...

CVE-2006-1700

Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote attackers to bypass authentication...

CVE-2006-1700

Summary: CVE-2006-1700 concerns Buy.php in Aweb Scripts Seller, where authentication relies on cookies that are predictable based on the current time and the script number, enabling remote attackers to bypass authentication. What is affected: The Aweb Scripts Seller product’s Buy.php authenticati...

CVE-2006-1699

Cross-site scripting XSS vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode...

CVE-2006-1699

CVE-2006-1699 describes a Cross-site scripting (XSS) vulnerability in index.php of Aweb Banner Generator 3.0 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode. According to the NVD entry, the affected software is Aweb Banner...

CVE-2004-1991

CVE-2004-1991 affects Aldo’s Web Server (aweb) 1.5. The vulnerability is aDirectory traversal in an HTTP GET request that allows an attacker to view arbitrary files by supplying an improper path using .. (dot dot). The NVD metrics indicate a NETWORK attack vector with low complexity and no authen...

CVE-2004-1990

Aldo's Web Server (aweb) 1.5 is affected by an information-disclosure vulnerability. Remote attackers can cause the server to reveal the full path and the user running the aweb process via an arbitrary character in a malformed request. Root cause is associated with handling of malformed requests ...