CVE-2010-4910

.Product: ColdGen ColdCalendar 2.06. Vulnerability: SQL injection in the index.cfm handling ViewEventDetails with the EventID parameter, allowing remote execution of arbitrary SQL commands. Root cause: Improper input handling leading to SQLi. Impact: potential data exposure/modification, dependin...

CVE-2010-4913

Cross-site scripting XSS vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4915: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action...

CVE-2010-4913: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4916: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the 1 ArticleID or 2 LibraryID parameter...

CVE-2010-4910: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...

ColdBookmarks 1.22 SQL Injection

ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...

ColdOfficeView 2.04 Blind SQL Injection

ColdGen - coldofficeview v2.04 Remote Blind SQL Injection vulnerabilities Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC's 1. http://target/path/index.cfm?fuseaction=ViewEventDetails&EventID=Blind SQLi http://target/path/index.cfm?fuseaction=ViewEventDetails&EventID=1 and 1=1 tr...

ColdBookmarks 1.22 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== ColdBookmarks 1.22 SQL Injection Vulnerability ============================================== ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/...

ColdCalendar 2.06 - SQL Injection

ColdCalendar 2.06 - SQL Injection !/usr/bin/python ColdGen - coldcalender v2.06 Remote 0day SQL Injection Exploit Vendor: http://www.coldgen.com/ Found by: mrme ----------------------------------------------- Script provided 'as is', without any warranty. Use for educational purposes only. Do not...

ColdBookmarks 1.22 - SQL Injection

ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...

ColdOfficeView 2.04 - Multiple Blind SQL Injections

ColdGen - coldofficeview v2.04 Remote Blind SQL Injection vulnerabilities Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC's 1. http://target/path/index.cfm?fuseaction=ViewEventDetails&EventID=Blind SQLi http://target/path/index.cfm?fuseaction=ViewEventDetails&EventID=1 and 1=1 tr...

ColdBookmarks 1.22 - SQL Injection

ColdBookmarks 1.22 - SQL Injection ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC http://target/path/index.cfm?fuseaction=EditBookmark&BookmarkID=SQLi&CFID=XXXXXX&CFTOKEN=XXXXXXXX...

ColdOfficeView 2.04 Multiple Blind SQL Injection Vulnerabilities

Exploit for php platform in category web applications ================================================================ ColdOfficeView 2.04 Multiple Blind SQL Injection Vulnerabilities ================================================================ ColdGen - coldofficeview v2.04 Remote Blind SQL...

ColdUserGroup 1.06 - Blind SQL Injection

ColdUserGroup 1.06 - Blind SQL Injection !/usr/bin/python ColdGen - coldusergroup v1.06 0day Remote Blind SQL Injection Exploit Vendor: http://www.coldgen.com/ Found by: mrme ----------------------------------------------- Script provided 'as is', without any warranty. Use for educational purpose...

ColdOfficeView 2.04 - Multiple Blind SQL Injections

ColdOfficeView 2.04 - Multiple Blind SQL Injections ColdGen - coldofficeview v2.04 Remote Blind SQL Injection vulnerabilities Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC's 1. http://target/path/index.cfm?fuseaction=ViewEventDetails&EventID=Blind SQLi...