CVE-2006-6859: Undefined Security Weakness

SQL injection vulnerability in coupondetail.asp in Website Designs For Less Click N' Print Coupons 2005.01 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2006-6189

SQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote attackers to execute arbitrary SQL commands via the date parameter...

CVE-2006-6188

Cross-site scripting XSS vulnerability in viewsearch.asp in ClickTech Click Gallery allows remote attackers to inject arbitrary web script or HTML via the txtKeyWord parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-6187

Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to execute arbitrary SQL commands via the 1 currentpage or 2 galleryid parameter to a viewgallery.asp, the 3 imageid parameter to b downloadimage.asp, the currentpage or 5 orderby parameter to c gallery.asp, ...

CVE-2006-6188

Cross-site scripting XSS vulnerability in viewsearch.asp in ClickTech Click Gallery allows remote attackers to inject arbitrary web script or HTML via the txtKeyWord parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-6189: Undefined Security Weakness

SQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote attackers to execute arbitrary SQL commands via the date parameter...

CVE-2006-6187

Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to execute arbitrary SQL commands via the 1 currentpage or 2 galleryid parameter to a viewgallery.asp, the 3 imageid parameter to b downloadimage.asp, the currentpage or 5 orderby parameter to c gallery.asp, ...

CVE-2006-6189

SQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote attackers to execute arbitrary SQL commands via the date parameter...

CVE-2006-6187: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to execute arbitrary SQL commands via the 1 currentpage or 2 galleryid parameter to a viewgallery.asp, the 3 imageid parameter to b downloadimage.asp, the currentpage or 5 orderby parameter to c gallery.asp, ...

CVE-2006-6189

CVE-2006-6189 describes an SQL injection in the web application component displayCalendar.asp of ClickTech Click Blog . The vulnerability allows remote attackers to inject arbitrary SQL commands via the date parameter, leading to potential data exposure or manipulation. The existing connected sou...

CVE-2006-6188: Undefined Security Weakness

Cross-site scripting XSS vulnerability in viewsearch.asp in ClickTech Click Gallery allows remote attackers to inject arbitrary web script or HTML via the txtKeyWord parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-6188

CVE-2006-6188 is a Cross-site Scripting (XSS) vulnerability in ClickTech Click Gallery (view_search.asp) that can be exploited via the txtKeyWord parameter to inject arbitrary script/HTML. Affected: ClickTech Click Gallery; vulnerable component: view_search.asp. Root cause: improper neutralizatio...

CVE-2006-6187

CVE-2006-6187 involves multiple SQL injection vulnerabilities in ClickTech Click Gallery. The affected components are the web-facing scripts: view_gallery.asp (parameters: currentpage, gallery_id), download_image.asp (parameter: image_id), gallery.asp (parameter: orderby), and view_recent.asp (pa...

aria-clickblog.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: Click Blog Method: SQL injection PoC: http://target/displayCalendar.asp?date=SQL Injection Contact: [email protected]...

aria-clickcontact.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: Click Contact Method: SQL injection PoC: http://target/default.asp?view=alpha&AlphaSort=SQL Injection http://target/default.asp?In=SQL INJECTION http://target/default.asp?view=All&orderby=SQL Injecti...

aria-clickgal.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: Click Gallery Method: SQL Injection And XSS Vendor:ClickGallery.net PoC: http://target/viewgallery.asp?galleryid=809&currentpage=SQL Injection http://target/viewgallery.asp?galleryid=SQL injection...

Click Gallery - Multiple Input Validation Vulnerabilities

Click Gallery - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/21311/info Click Gallery is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently saniti...

Clickblog Sql Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian ----------------------------------------------------------- Software: Click Blog Method: SQL injection PoC: http://target/displayCalendar.asp?date=SQL Injection Contact: [email protected]...

CVE-2006-4732

Unspecified vulnerability in Microsoft Visual Basic VB 6 has an unknown impact "overflow" via a project that contains a certain Click event procedure, as demonstrated using the msgbox function and the VB.Label object...

CVE-2006-4732

The CVE concerns Microsoft Visual Basic 6 (VB6). A vulnerability arises in a project containing a specific Click event procedure (demonstrated with msgbox and VB.Label) that causes an unspecified overflow. The affected component is the VB6 runtime/IDE context where the Click event triggers the ov...