EUVD-2005-4815

Malware in sbrugna...

Digger Solutions Newsletter Open Source SQL Injection Vulnerability

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Diggersolutions Newsletter SQL injection Vulnerability Version:2.7.1 Vendor url:http://diggersolutions.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic,...

Digger Solutions NewsLetter Open Source - SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Diggersolutions Newsletter SQL injection Vulnerability Version:2.7.1 Vendor url:http://diggersolutions.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic, M4n0j,SeeMe, gunslinger, Th3 RDX...

CVE-2007-0116

Digger Solutions Intranet Open Source IOS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for data/intranet.mdb...

CVE-2007-0116

The CVE-2007-0116 issue affects Digger Solutions Intranet Open Source (IOS). The vulnerability arises from storing sensitive information under the web root with insufficient access control, enabling remote attackers to download a database containing passwords by directly requesting data/intranet....

CVE-2005-4822

SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source IOS version 2.7.2 allows remote attackers to execute arbitrary SQL commands via the projectid parameter...

CVE-2005-4822

Digger Solutions Intranet Open Source (IOS) 2.7.2 contains an SQL injection in projects/project-edit.asp via the project_id parameter. This allows remote attackers to execute arbitrary SQL commands. Exploitation details are not provided in the documents; no confirmed in-the-wild exploit data is l...

CVE-2005-4822

SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source IOS version 2.7.2 allows remote attackers to execute arbitrary SQL commands via the projectid parameter...