33 matches found
EUVD-2006-6325
Malware in sbrugna...
EUVD-2006-2133
Malware in sbrugna...
fredbock.com XSS vulnerability
Open Bug Bounty ID: OBB-618764 Description| Value ---|--- Affected Website:| fredbock.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
autoDealer <= 2.0 (detail.asp iPro) Remote SQL Injection Vulnerability
No description provided by source. Title : autoDealer = 2.0 iPro Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.aspsiteware.com $$ : $60.00 SQL--------------------------------------------------------- http://target/path//detail.asp?iPro=SQL Example:...
DUclassified Detail.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17722/info DUclassified is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...
CVE-2010-4793
SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2010-4793
CVE-2010-4793 affects Site2Nite Auto e-Manager (Detail.asp) via the ID parameter. The root cause is an SQL injection vulnerability in the detail.asp page, allowing remote attackers to execute arbitrary SQL commands. Concretely, the vulnerability is triggered through the ID parameter without prope...
Sql injection
SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2010-4636
CVE-2010-4636 is a SQL injection vulnerability in the Site2Nite Business e-Listings product, affecting the detail.asp component. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying a crafted ID parameter, enabling data exposure/modification and potential unaut...
Sql injection
SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter...
ASPSiteWare RealtyListing 1.0/2.0 - SQL Injection
-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : RealtyListing V1/V2 download : null Demo : http://www.aspsiteware.com/Realty1 http://www.aspsiteware.com/realty2/realty2/ Exploits :...
Sql injection
SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the iPro parameter...
autoDealer <= 2.0 (detail.asp iPro) Remote SQL Injection Vulnerability
No description provided by source. Title : autoDealer = 2.0 iPro Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.aspsiteware.com $$ : $60.00 SQL--------------------------------------------------------- http://target/path//detail.asp?iPro=SQL Example:...
autoDealer <= 2.0 (detail.asp iPro) Remote SQL Injection Vulnerability
Exploit for asp platform in category web applications ====================================================================== autoDealer = 2.0 detail.asp iPro Remote SQL Injection Vulnerability ====================================================================== Title : autoDealer = 2.0 iPro...
AutoDealer 2.0 - 'detail.asp?iPro' SQL Injection
Title : autoDealer = 2.0 iPro Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.aspsiteware.com $$ : $60.00 SQL--------------------------------------------------------- http://target/path//detail.asp?iPro=SQL Example:...
多个DuWare产品Detail.ASP SQL注入漏洞
DuWare是基于ASP的WEB应用程序。 DuWare多个产品不充分过滤用户提交的URI输入,远程攻击者可以利用漏洞进行SQL注入攻击,获得敏感信息。 问题是'detail.ASP'脚本对用户提交的'itype'参数缺少过滤,提交恶意SQL查询作为参数数据,可更改原来的SQL逻辑,获得敏感信息。 DUware DUpaypal Pro 3.1 DUware DUpaypal Pro 3.0 DUware DUpaypal 3.1 DUware DUpaypal 3.0 DUware DUnews 1.1 DUware DUnews 1.0 DUware DUdownload 1.1...
CVE-2006-6342
Multiple SQL injection vulnerabilities in KLF-DESIGN aka Kim L. Fraser KLF-REALTY allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 agent parameters in a searchlisting.asp, and the 3 propertyid parameter in b detail.asp...
klfrealty.txt
vendor site:http://klf-design.com/ product :klf-realty bug:injection sql risk : medium injection sql : /searchlisting.asp?category='sql /detail.asp?propertyid='sql /searchlisting.asp?agent='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...
CVE-2006-5891
SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2006-5890
CVE-2006-5890 affects Superfreaker Studios USupport 1.0 . The vulnerability is a SQL injection in detail.asp via the id parameter , allowing remote attackers to execute arbitrary SQL commands. CVSSv2 indicates a base score of 7.5 (HIGH) with network access, low attack complexity, no authenticatio...