Sql injection

Multiple SQL injection vulnerabilities in eshtery CMS aka eshtery.com allow remote attackers to execute arbitrary SQL commands via the 1 Criteria field in an unspecified form related to catlgsearch.aspx or 2 user name to an unspecified form related to adminlogin.aspx...

CVE-2010-3404

The CVE concerns eshtery CMS (eshtery.com). The vulnerability is a SQL injection affecting the application in two input paths: (1) the Criteria field tied to catlgsearch.aspx and (2) the user name input on adminlogin.aspx. The root cause is unsafe handling/concatenation of user-supplied data, ena...

CVE-2010-3404

Multiple SQL injection vulnerabilities in eshtery CMS aka eshtery.com allow remote attackers to execute arbitrary SQL commands via the 1 Criteria field in an unspecified form related to catlgsearch.aspx or 2 user name to an unspecified form related to adminlogin.aspx...