CVE-2010-5045: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in poll/default.asp in Smart ASP Survey allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2010-4987

SQL injection vulnerability in default.asp in KMSoft Guestbook aka GBook allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2010-4987: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in KMSoft Guestbook aka GBook allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2010-4966

Cross-site scripting XSS vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML via the query parameter in a Search action...

CVE-2010-4967

SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artID parameter...

CVE-2010-4966

Cross-site scripting XSS vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML via the query parameter in a Search action...

Sql injection

SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artID parameter...

CVE-2009-5102: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL commands via the bpenid parameter...

CVE-2010-4966: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML via the query parameter in a Search action...

CVE-2010-4967: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artID parameter...

Dimac CMS 1.3 XS - default.asp SQL Injection

Dimac CMS 1.3 XS - default.asp SQL Injection source: https://www.securityfocus.com/bid/47291/info Dimac CMS XS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

Easyweb Paket 4 SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Easyweb Paket 4 SQl Injection Vulnerability Author: CSI Home : www.cyber-warrior.org Email : email protected date : 11/3/2011 D0rk :intext:"Easyweb Paket 4" Script Vendor: http://www.artwin.net/ SQL...

CVE-2010-4703: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PageId parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

HotWeb Rentals "PageId" SQL Injection Vulnerability

HotWeb Rentals "PageId" SQL Injection Vulnerability PRODUCT http://www.hotwebscripts.co.uk/ Input passed to the "PageId" parameter in default.asp is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. POC...

dotcom systems cms (default.asp) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ dotcom systems cms default.asp SQL Injection Vulnerability ============================================================...

i-Web Suite SQL Injection / Cross Site Scripting

========================================= Vulnerability ID: HTB22544 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityiniwebsuite.html Product: i-Web Suite Vendor: immediaC world wide Inc http://www.immediac.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vend...

CVE-2010-2922

SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2922

SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2922: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the id parameter...

webConductor - default.asp SQL Injection

webConductor - default.asp SQL Injection source: https://www.securityfocus.com/bid/41042/info webConductor is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...