24 matches found
CVE-2005-1011
SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter...
CVE-2005-1011
CVE-2005-1011 affects SiteEnable’s content.asp script where the sortby parameter is not properly sanitized, enabling remote attackers to inject arbitrary SQL commands. The vulnerability is documented in multiple sources (NVD entry with CVSSv2 base score 7.5 HIGH, remote network access, no authent...
SiteEnable Multiple Input Validation Vulnerabilities
The remote host is running a version of the SiteEnable CMS package that has several vulnerabilities : - SQL Injection Vulnerability Due to a failure to properly sanitize user input to the 'sortby' parameter of the 'content.asp' script, an attacker can execute SQL queries against the underlying...
CVE-2005-0949
CVE-2005-0949 describes multiple cross-site scripting (XSS) vulnerabilities in the PortalApp’s content.asp. The flaws allow remote attackers to inject arbitrary web script or HTML via the parameters contenttype or keywords . The NVD entry provides a base score of 4.3 (Medium) with network attack ...