CVE-2008-5638

Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the 1 ProductID parameter to reviews.aspx or the 2 linkid parameter to links.asp...

CVE-2008-5638

CVE-2008-5638 : Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the ProductID parameter to reviews.aspx or the linkid parameter to links.asp. The issue is evidenced by multiple sources (NVD entry and Exploit-DB listi...

CVE-2008-5638

Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the 1 ProductID parameter to reviews.aspx or the 2 linkid parameter to links.asp...

CVE-2008-5638: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the 1 ProductID parameter to reviews.aspx or the 2 linkid parameter to links.asp...

Active Price Comparison v4 (ProductID) Blind SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date:...

activeprice-blindsql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Active Price Comparison v 4 (ProductID) Blind SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date:...

Active Price Comparison v 4 (ProductID) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================================= Active Price Comparison v 4 ProductID Blind SQL Injection Vulnerability ========================================================================= Tybe:reviews.aspx...

Active Price Comparison 4 - 'ProductID' Blind SQL Injection

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...

Active Price Comparison 4 - ProductID Blind SQL Injection

Active Price Comparison 4 - ProductID Blind SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 autho...

Active Price Comparison 4 - ProductID Blind SQL Injection Vulnerability

Active Price Comparison v 4 ProductID Blind SQL Injection Vulnerability. CVE-2008-5638,CVE-2008-5975. Webapps exploit for php platform ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability...

Active Price Comparison 4 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Active Price Comparison 4 Auth Bypass SQL Injection Vulnerability =================================================================== Tybe:Auth Bypass Remote SQL Injection...

Active Price Comparison 4 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date: 28.11.2008...

rakhi-sql.txt

■ Prince Comparison Script : Shopping card @.@ AuToR: XaDoS Contact M&: xados at hotmail dot it B§g: Remote Sql inJection SIte vuln: http://willscript.com/rjbikenew/index.php @.@ str0ke OnlY me no help for this ;- /...

Active Price Comparison 4 - Authentication Bypass

Active Price Comparison 4 - Authentication Bypass ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date...

Active Price Comparison 4 - Authentication Bypass

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

CVE-2008-4558

Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison...

Code injection

Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison...

CVE-2008-4359

lighttpd before 1.4.20 compares URIs to patterns in the 1 url.redirect and 2 url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data...

CVE-2008-4360

moduserdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a...