Dimac CMS 1.3 XS - default.asp SQL Injection

Dimac CMS 1.3 XS - default.asp SQL Injection source: https://www.securityfocus.com/bid/47291/info Dimac CMS XS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

Easyweb Paket 4 SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Easyweb Paket 4 SQl Injection Vulnerability Author: CSI Home : www.cyber-warrior.org Email : email protected date : 11/3/2011 D0rk :intext:"Easyweb Paket 4" Script Vendor: http://www.artwin.net/ SQL...

PT-2011-1657

Name of the Vulnerable Software and Affected Versions HotWebScripts HotWeb Rentals affected versions not specified Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the PageId parameter in the "default.asp" file...

CVE-2010-4703: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PageId parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

HotWeb Rentals "PageId" SQL Injection Vulnerability

HotWeb Rentals "PageId" SQL Injection Vulnerability PRODUCT http://www.hotwebscripts.co.uk/ Input passed to the "PageId" parameter in default.asp is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. POC...

PT-2010-5433

Name of the Vulnerable Software and Affected Versions Site2Nite Big Truck Broker affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the txtSiteId parameter in the "news default.asp" file. Recommendations At the...

dotcom systems cms (default.asp) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ dotcom systems cms default.asp SQL Injection Vulnerability ============================================================...

i-Web Suite SQL Injection / Cross Site Scripting

========================================= Vulnerability ID: HTB22544 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityiniwebsuite.html Product: i-Web Suite Vendor: immediaC world wide Inc http://www.immediac.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vend...

CVE-2010-2922

SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2922

SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2922: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the id parameter...

webConductor - 'default.asp' SQL Injection

source: https://www.securityfocus.com/bid/41042/info webConductor is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

webConductor - default.asp SQL Injection

webConductor - default.asp SQL Injection source: https://www.securityfocus.com/bid/41042/info webConductor is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Sql injection

Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search, 2 sbr, 3 pid, 4 sbl, and 5 FilePath parameters to default.asp; and the 6 sbr, 7 pr, and 8 psPrice parameters to printpage.asp...

CVE-2010-2316

CVE-2010-2316 describes multiple cross-site scripting (XSS) vulnerabilities in WmsCms 2.0 and earlier, affecting default.asp and related endpoints. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) search, (2) sbr, (3) p, and (4) sbl parameters, with vectors dif...

CVE-2010-2316: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 sbr, 3 p, and 4 sbl parameters, different vectors than CVE-2007-3137...

CVE-2010-2317: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search, 2 sbr, 3 pid, 4 sbl, and 5 FilePath parameters to default.asp; and the 6 sbr, 7 pr, and 8 psPrice parameters to printpage.asp...

WMSCMS Cross Site Scripting / SQL Injection

Title: XSS, SQL injection vulnerability in WmsCMS EDB-ID: CVE: OSVDB-ID: Author: Ariko-Security Published: 2010-06-05 ============ Ariko-Security - Advisory 1/6/2010 ============= XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583 only XSS 3 params Vendor's Description of...

WmsCMS XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== WmsCMS XSS / SQL Injection Vulnerability ======================================== XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583 only XSS 3 params Vendor's Description of...

WmsCMS - Cross-Site Scripting SQL Injection

WmsCMS - Cross-Site Scripting SQL Injection Title: XSS, SQL injection vulnerability in WmsCMS EDB-ID: CVE: OSVDB-ID: Author: Ariko-Security Published: 2010-06-05 ============ Ariko-Security - Advisory 1/6/2010 ============= XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583...