28 matches found
CVE-2014-1223: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtain...
WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities
WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities Name WhiteBoard Vendor http://sarosoftware.com Versions Affected 0.1.30 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-24 X. INDEX I. ABOUT THE...
WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities
Exploit for php platform in category web applications ============================================================== WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities ============================================================== Name WhiteBoard Vendor http://sarosoftware.com Version...
e-webtech (page.asp) SQL Injection Vulnerability
Exploit for asp platform in category web applications ================================================ e-webtech page.asp SQL Injection Vulnerability ================================================ -------------------------------------------------------------------------------------------...
CVE-2008-2023
Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 invisible and 2 timeoffset parameters to profile/controlpanel.asp and the 3 attachmentid parameter to forums/attach-file.asp...
CVE-2006-2911
SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2006-2911
SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2006-2911: Undefined Security Weakness
SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the username parameter...