Unfixed XSS vulnerability at www.lovemypets.com

Security researcher CCC, has submitted on 05/03/2008 a cross-site-scripting XSS vulnerability affecting www.lovemypets.com, which at the time of submission ranked 1837705 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is current...

CVE-2008-2048

The documents confirm a Cross-site scripting (XSS) vulnerability in Angelo-Emlak 1.0, specifically in hpz/admin/Default.asp, exploitable via the sayfa parameter. This affects Angelo-Emlak 1.0 and allows remote attackers to inject arbitrary web script or HTML. The root cause is an XSS flaw in the ...

CVE-2008-2048: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject arbitrary web script or HTML via the sayfa parameter...

Sql injection

Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the 1 cID parameter to default.asp and the 2 username parameter to mainlogin2.asp...

CVE-2008-1990: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the 1 cID parameter to default.asp and the 2 username parameter to mainlogin2.asp...

CVE-2008-1641: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL commands via the catID parameter...

Efestech Video v5,0 (id) Remote Sql Injection

$Author : RMx $Mail : [email protected] $Homepage : Coderx.org $Script name :Efestech video v5.0 $Script download :http://www.aspindir.com/goster/4835 $Script Sales : Free $Thanks : Ex-47 , TRIP $Vulnerable file : Default.asp $Vulnerable code : id parameters cannot filter... $Exploit :...

(tip=sollinkicerik)SQL Injection Vulnerability

CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ tip=sollinkicerikSQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net WHEN YOU PUT THIS SQL CODE YOU can SEE ADMN NAME,ADMIN HASH DorK : ''tip=sollinkicerik'' EXPLOIT:...

CVE-2008-0771

Multiple SQL injection vulnerabilities in default.asp in Site2Nite allow remote attackers to execute arbitrary SQL commands via the 1 txtUserName and 2 txtPassword parameters. NOTE: some of these details are obtained from third party information...

CVE-2008-0771

CVE-2008-0771 involves multiple SQL injection vulnerabilities in Site2Nite’s default.asp. The vulnerable component is the web application’s default.asp, exploitable via the parameters txtUserName and txtPassword , enabling remote attackers to execute arbitrary SQL commands. The CVE’s NVD record a...

CVE-2008-0771: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in default.asp in Site2Nite allow remote attackers to execute arbitrary SQL commands via the 1 txtUserName and 2 txtPassword parameters. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in Default.asp in RapidShare Database allows remote attackers to inject arbitrary web script or HTML via the Arayalim parameter...

CVE-2007-6674

Cross-site scripting XSS vulnerability in Default.asp in RapidShare Database allows remote attackers to inject arbitrary web script or HTML via the Arayalim parameter...

CVE-2007-6674

CVE-2007-6674 describes a Cross-site Scripting (XSS) vulnerability in Default.asp of the RapidShare Database, exploitable by supplying arbitrary web script/HTML via the Arayalim parameter. The NVD entry lists a Medium risk (CVSS v2 base score 4.3) with network attack vector, no confidentiality im...

CVE-2007-6674: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Default.asp in RapidShare Database allows remote attackers to inject arbitrary web script or HTML via the Arayalim parameter...

CVE-2007-6556

Multiple SQL injection vulnerabilities in websihirbazi 5.1.1 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to default.asp in a news page action or 2 the pageid parameter to default.asp...

CVE-2007-6556: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in websihirbazi 5.1.1 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to default.asp in a news page action or 2 the pageid parameter to default.asp...

CVE-2007-6496: Undefined Security Weakness

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password parameters set, when preceded by certain requests to hosting/default.asp and hosting/selectdomain.asp, a related issue to...

CVE-2007-6168

SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-6168: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...