CVE-2007-3989

Multiple cross-site scripting XSS vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set to iletisim, allow remote attackers to inject arbitrary web script or HTML via the 1 Adiniz and 2 Soyadiniz parameters; and possibly other unspecified vectors. NOTE: the provenance...

CVE-2007-3990: Undefined Security Weakness

SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3989: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set to iletisim, allow remote attackers to inject arbitrary web script or HTML via the 1 Adiniz and 2 Soyadiniz parameters; and possibly other unspecified vectors. NOTE: the provenance...

CVE-2007-3940: Undefined Security Weakness

Cross-site scripting XSS vulnerability in default.asp in QuickerSite 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the svalue parameter in a search action. NOTE: some of these details are obtained from third party information...

CVE-2007-3886: Undefined Security Weakness

Cross-site scripting XSS vulnerability in default.asp in Element CMS allows remote attackers to inject arbitrary web script or HTML via the s parameter in a search pID action...

CVE-2007-3783

SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action. NOTE: this is probably different from CVE-2005-1413.4...

CVE-2007-3783

CVE-2007-3783 describes a SQL injection vulnerability in enVivo!CMS, exploitable through the ID parameter of article actions in default.asp. The underlying issue allows remote attackers to execute arbitrary SQL commands and potentially access or modify data, as indicated in the NVD entry. The des...

CVE-2007-3783: Undefined Security Weakness

SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action. NOTE: this is probably different from CVE-2005-1413.4...

SQL-инъекция в enVivo!CMS

Здравствуйте, 3APA3A. Software: enVivo!CMS Vendor: www.envivosoft.com Vulnerability: SQL-инъекция Risk: высокий Date: 6.07.2007 discovered by durito damagelab -duritoatmaildotru- HTTP: durito.narod.ru www.damagelab.org +:| Details |: SQL-инъекция в скрипте default.asp +:| Экплойт |:...

Unfixed XSS vulnerability at www.oyuncenter.org

Security researcher hacktonicTR, has submitted on 19/06/2007 a cross-site-scripting XSS vulnerability affecting www.oyuncenter.org, which at the time of submission ranked 6296639 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2007. It is...

CVE-2007-2803: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in Vizayn Urun Tanitim Sitesi 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a haberdetay action...

Sql injection

SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-1712: Undefined Security Weakness

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-1705: Undefined Security Weakness

SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Active Linke Engine Default.ASP SQL注入漏洞

Active Linke Engine是一款基于ASP的WEB应用程序。 Active Linke Engine不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'Default.ASP'脚本对用户提交的'catid'参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Active Web Softwares Active Link Engine 目前没有解决方案提供： http://www.activewebsoftwares.com/default.aspx...

Active Auction Pro 7.1 (default.asp catid) SQL Injection Vulnerability

No description provided by source. Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

CVE-2007-1630

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-1629

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-1630

CVE-2007-1630 describes an SQL injection in the ActiveLink Engine from ActiveWebSoftwares. The vulnerability resides in the default.asp script, with the catid parameter enabling remote attackers to execute arbitrary SQL commands. The NVD entry notes a base score of 7.5 (High) with network access,...

CVE-2007-1629

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter...