Unfixed XSS vulnerability at www.amue.fr

Security researcher MaXWeL, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.amue.fr, which at the time of submission ranked 313992 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currently...

Sql injection

SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3989

CVE-2007-3989 describes multiple reflected XSS vulnerabilities in the Dora Emlak 1.0 web app, specifically in default.asp when goster is set to iletisim. The vulnerabilities allow injection of arbitrary script/HTML via the Adiniz and Soyadiniz parameters (and possibly other vectors). Affected com...

CVE-2007-3989

Multiple cross-site scripting XSS vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set to iletisim, allow remote attackers to inject arbitrary web script or HTML via the 1 Adiniz and 2 Soyadiniz parameters; and possibly other unspecified vectors. NOTE: the provenance...

CVE-2007-3783

SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action. NOTE: this is probably different from CVE-2005-1413.4...

CVE-2007-3783

CVE-2007-3783 describes a SQL injection vulnerability in enVivo!CMS, exploitable through the ID parameter of article actions in default.asp. The underlying issue allows remote attackers to execute arbitrary SQL commands and potentially access or modify data, as indicated in the NVD entry. The des...

SQL-инъекция в enVivo!CMS

Здравствуйте, 3APA3A. Software: enVivo!CMS Vendor: www.envivosoft.com Vulnerability: SQL-инъекция Risk: высокий Date: 6.07.2007 discovered by durito damagelab -duritoatmaildotru- HTTP: durito.narod.ru www.damagelab.org +:| Details |: SQL-инъекция в скрипте default.asp +:| Экплойт |:...

Unfixed XSS vulnerability at www.oyuncenter.org

Security researcher hacktonicTR, has submitted on 19/06/2007 a cross-site-scripting XSS vulnerability affecting www.oyuncenter.org, which at the time of submission ranked 6296639 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2007. It is...

Sql injection

SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Active Linke Engine Default.ASP SQL注入漏洞

Active Linke Engine是一款基于ASP的WEB应用程序。 Active Linke Engine不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'Default.ASP'脚本对用户提交的'catid'参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Active Web Softwares Active Link Engine 目前没有解决方案提供： http://www.activewebsoftwares.com/default.aspx...

Active Auction Pro 7.1 (default.asp catid) SQL Injection Vulnerability

No description provided by source. Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

CVE-2007-1630

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-1629

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-1630

CVE-2007-1630 describes an SQL injection in the ActiveLink Engine from ActiveWebSoftwares. The vulnerability resides in the default.asp script, with the catid parameter enabling remote attackers to execute arbitrary SQL commands. The NVD entry notes a base score of 7.5 (High) with network access,...

CVE-2007-1629

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Active Trade v 2 (default.asp catid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Active Trade v 2 default.asp catid Remote SQL Injection Vulnerability ======================================================================= Title : Active Trade Remo...

Active Auction Pro 7.1 - 'default.asp?catid' SQL Injection

Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

Active Photo Gallery (default.asp catid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Active Photo Gallery default.asp catid SQL Injection Vulnerability ==================================================================== Title : Active Photo Gallery Remot...

Active Link Engine - 'default.asp?catid' SQL Injection

Title : Active Link Engine Remote SQL Injection Vulnerability Author : CyberGhost My Web Site : http://aspspider.org/cgsecurity Demo Page : http://www.activewebsoftwares.com/demoactivelinkengine Script Page : http://www.activewebsoftwares.com/productinfo.aspx?ProductID=7 Vuln. Username :...

Active Link Engine - default.asp?catid SQL Injection

Active Link Engine - default.asp?catid SQL Injection Title : Active Link Engine Remote SQL Injection Vulnerability Author : CyberGhost My Web Site : http://aspspider.org/cgsecurity Demo Page : http://www.activewebsoftwares.com/demoactivelinkengine Script Page :...