107 matches found
aeries browser interface(ABI) 3.7.2.2 Remote SQL Injection
Discovered By : Arsalan Emamjomehkashan [email protected] aeries browser interface 3.7.2.2 SQL Injection Website:http://aeries.com/ Demo:you can test it on http://demo.aeries.com/abi/ Comments.asp?&FC=SQL Labels.asp?&Term=SQL ClassList.asp&Term=SQL -------------------------------- Aria-Security...
aeries browser interface(ABI) 3.8.2.8 XSS
Discovered By : Arsalan Emamjomehkashan [email protected] aeries browser interfaceABI 3.8.2.8 XSS Website:http://aeries.com/ Login on it add a new event with scriptalert"xss/script and it will work each time you load your homepage -------------------------------- Aria-Security Team...
CVE-2007-6517
SQL injection vulnerability in the forget password section LostPwd.asp in Eagle Software Aeries Browser Interface ABI 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in the forget password section LostPwd.asp in Eagle Software Aeries Browser Interface ABI 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information...
CVE-2007-6517
SQL injection vulnerability in the forget password section LostPwd.asp in Eagle Software Aeries Browser Interface ABI 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information...
CVE-2005-2260
The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be...