22 matches found
Mailtraq 2.2 Browse.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7813/info Mailtraq is vulnerable to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of HTTP requests to the vulnerable Mailtraq server. An attacker can exploit this vulnerability by...
ewebeditor 5.2 column directory vulnerability-vulnerability warning-the black bar safety net
Author:st0p Due to the Do It Yourself station with the editor in front of their streamlined ewebeditor 5.2 the asp version,work tired,want to rest,you analyze A this editor,I did not expect,also really let I found a little vulnerability,although the effect is not,however, used to assist is still...
Cross site scripting
Cross-site scripting XSS vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject arbitrary web script or HTML via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Sql injection
SQL injection vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to execute arbitrary SQL commands via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0908
SQL injection vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to execute arbitrary SQL commands via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0908
CVE-2008-0908 describes a SQL injection vulnerability in the Schoolwires Academic Portal, specifically in the browse.asp component, exploitable via the c parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, as noted in the description. The origin of the informat...
CVE-2008-0909
Cross-site scripting XSS vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject arbitrary web script or HTML via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0908: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to execute arbitrary SQL commands via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0909: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject arbitrary web script or HTML via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-5959: Undefined Security Weakness
SQL injection vulnerability in browse.asp in A+ Store E-Commerce allows remote attackers to execute arbitrary SQL commands via the ParentID parameter...
CVE-2006-4852: Undefined Security Weakness
SQL injection vulnerability in browse.asp in QuadComm Q-Shop 3.5 allows remote attackers to execute arbitrary SQL commands via the OrderBy parameter...
Q-Shop v3.5(browse.asp) Remote SQL Injection Vulnerability
Vulnerability Report Title : Q-Shop v3.5browse.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://quadcomm.com Exploit; http://target/path/browse.asp?cat=42&ManuID=&OrderBy=SQL HERE Example:...
Q-Shop 3.5 (browse.asp) Remote SQL Injection Vulnerability
No description provided by source. Vulnerability Report Title : Q-Shop v3.5browse.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://quadcomm.com Exploit; http://target/path/browse.asp?cat=42&ManuID=&OrderBy=SQL HERE Example:...
Q-Shop 3.5 (browse.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== Q-Shop 3.5 browse.asp Remote SQL Injection Vulnerability ========================================================== Vulnerability Report Title : Q-Shop v3.5browse.asp Remote SQL...
Q-Shop 3.5 - browse.asp SQL Injection
Q-Shop 3.5 - browse.asp SQL Injection Vulnerability Report Title : Q-Shop v3.5browse.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://quadcomm.com Exploit; http://target/path/browse.asp?cat=42&ManuID=&OrderBy=SQL HERE Example:...
Q-Shop 3.5 - 'browse.asp' SQL Injection
Vulnerability Report Title : Q-Shop v3.5browse.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://quadcomm.com Exploit; http://target/path/browse.asp?cat=42&ManuID=&OrderBy=SQL HERE Example:...
CVE-2005-4369: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly strSearchKeywords to browse.asp...
CVE-2004-2108: Undefined Security Weakness
Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to 1 search.asp, 2 browse.asp, 3 details.asp, 4 showcat.asp, 5 users.asp, 6 addtomylist.asp, 7 modline.asp, 8 cart.asp, or 9 newuser.asp...
Mailtraq 2.2 - 'Browse.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/7813/info Mailtraq is vulnerable to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of HTTP requests to the vulnerable Mailtraq server. An attacker can exploit this vulnerability by manipulating the 'cfolder' URI...