HotWeb Rentals "PageId" SQL Injection Vulnerability

HotWeb Rentals "PageId" SQL Injection Vulnerability PRODUCT http://www.hotwebscripts.co.uk/ Input passed to the "PageId" parameter in default.asp is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. POC...

dotcom systems cms (default.asp) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ dotcom systems cms default.asp SQL Injection Vulnerability ============================================================...

i-Web Suite SQL Injection / Cross Site Scripting

========================================= Vulnerability ID: HTB22544 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityiniwebsuite.html Product: i-Web Suite Vendor: immediaC world wide Inc http://www.immediac.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vend...

CVE-2010-2922

SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2922

SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the id parameter...

webConductor - default.asp SQL Injection

webConductor - default.asp SQL Injection source: https://www.securityfocus.com/bid/41042/info webConductor is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

webConductor - 'default.asp' SQL Injection

source: https://www.securityfocus.com/bid/41042/info webConductor is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Sql injection

Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search, 2 sbr, 3 pid, 4 sbl, and 5 FilePath parameters to default.asp; and the 6 sbr, 7 pr, and 8 psPrice parameters to printpage.asp...

CVE-2010-2316

CVE-2010-2316 describes multiple cross-site scripting (XSS) vulnerabilities in WmsCms 2.0 and earlier, affecting default.asp and related endpoints. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) search, (2) sbr, (3) p, and (4) sbl parameters, with vectors dif...

WMSCMS Cross Site Scripting / SQL Injection

Title: XSS, SQL injection vulnerability in WmsCMS EDB-ID: CVE: OSVDB-ID: Author: Ariko-Security Published: 2010-06-05 ============ Ariko-Security - Advisory 1/6/2010 ============= XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583 only XSS 3 params Vendor's Description of...

WmsCMS - Cross-Site Scripting SQL Injection

WmsCMS - Cross-Site Scripting SQL Injection Title: XSS, SQL injection vulnerability in WmsCMS EDB-ID: CVE: OSVDB-ID: Author: Ariko-Security Published: 2010-06-05 ============ Ariko-Security - Advisory 1/6/2010 ============= XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583...

WmsCMS XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== WmsCMS XSS / SQL Injection Vulnerability ======================================== XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583 only XSS 3 params Vendor's Description of...

WmsCMS - Cross-Site Scripting / SQL Injection

Title: XSS, SQL injection vulnerability in WmsCMS EDB-ID: CVE: OSVDB-ID: Author: Ariko-Security Published: 2010-06-05 ============ Ariko-Security - Advisory 1/6/2010 ============= XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583 only XSS 3 params Vendor's Description of...

Sql injection

SQL injection vulnerability in default.asp in Cyberhost allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2142

SQL injection vulnerability in default.asp in Cyberhost allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cyberhost SQL Injection

Cyberhost SQL Injection Vulnerability Author : redst0rm Exploit : http://site.com/default.asp?gb=paketayrinti&id=sql Example: http://hosting-satis-sitesi.projesi.net/demo/default.asp?gb=paketayrinti&id=18+union+select+0,1,2,3,4,5,6,7+from+uye My Friend: dumenci - h4cker.tr - Kingdefacer - mx2devi...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Online Work Order Suite OWOS Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 default.asp and 2 report.asp, and the 3 go parameter to login.asp...

CVE-2009-4859

Multiple cross-site scripting XSS vulnerabilities in Online Work Order Suite OWOS Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 default.asp and 2 report.asp, and the 3 go parameter to login.asp...

CVE-2010-0710

ASPCode CMS contains an SQL injection in default.asp affecting versions 1.5.8 and 2.0.0 Build 103 (and possibly others). The vulnerability occurs when the newsid parameter is supplied and the sec parameter equals 26, allowing remote attackers to execute arbitrary SQL commands. The available sourc...

LDF (Default.asp) Sql Injection Vulnerability

Product : LDF vendor : www.ldf.22.cn Vulnerable Versions : All Default.asp Page has an issue on validating "Page" parameter , It could be exploited by attacker & attacker can inject arbitrary Sql Commands http://www.example.com/ldf path/default.asp?page=SQL COMMAND...