CVE-2008-6372: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action. NOTE: some of these details are obtained from third party information...

CVE-2008-6389: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in asadmin/default.asp in Rae Media Contact Management Software SOHO, Standard, and Enterprise allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6369: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to execute arbitrary SQL commands via the Sort parameter...

CVE-2008-6370: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in default.asp in Ocean12 Contact Manager Pro 1.02 allows remote attackers to inject arbitrary web script or HTML via the DisplayFormat parameter...

CVE-2008-6257

OpenASP 3.0 and earlier are affected by a SQL injection in default.asp (pages module) via the idpage parameter, allowing remote execution of arbitrary SQL commands. Root cause: unsafe SQL construction in the pages module. Affected: Openasp 3.0 and earlier. CVSS indicates high impact with partial ...

CVE-2008-6257: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in Openasp 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idpage parameter in the pages module...

CVE-2008-6204: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to secure/admin/guncelle.asp, 2 kulad and sifre parameters to secure/admin/giris.asp, and 3 username and password to secure/admin/default.asp...

Sql injection

SQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers to execute arbitrary SQL commands via the OrderDirection parameter...

CVE-2009-0431: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Default.asp in LinksPro Standard Edition allows remote attackers to execute arbitrary SQL commands via the OrderDirection parameter...

CVE-2009-0447: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the user parameter aka UserName field or 2 the pass parameter aka Pass field to a admin/admin.asp or b the default URI under admin/. NOTE: some of these detai...

Sql injection

Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to 1 default.asp and 2 sedit.asp...

CVE-2008-5979

CVE-2008-5979 describes a cross-site scripting (XSS) vulnerability in default.asp of Ocean12 Mailing List Manager Gold. The flaw allows remote attackers to inject arbitrary web script or HTML via the Email parameter, enabling potential session hijacking or defacement depending on the context and ...

CVE-2008-5978: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Ocean12 Mailing List Manager Gold allow remote attackers to execute arbitrary SQL commands via the Email parameter to 1 default.asp and 2 sedit.asp...

CVE-2008-5979: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to inject arbitrary web script or HTML via the Email parameter...

CVE-2008-5972: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2009-0252: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the 1 Login parameter aka username field or the 2 Password parameter aka password field. NOTE: some of these details are obtained from third party...

CVE-2008-5923: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat parameter...

CVE-2008-5599: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the password parameter aka passwd field in a login action. NOTE: some of these details are obtained from third party information...

merlixteamworx-bypassdisclose.txt

Merlix Teamworx Server DD/Bypass Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ----------------------------------------------------------...

SimpleBlog 3.0 (simpleBlog.mdb) Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= SimpleBlog 3.0 simpleBlog.mdb Database Disclosure Vulnerability ================================================================= » SimpleBlog 3.0 Mdb Vulnerability » »...