22 matches found
EUVD-2007-2872
Malware in sbrugna...
EUVD-2007-0132
Malware in sbrugna...
Digirez 3.4 - Cross-Site Request Forgery (Update Admin)
Digirez 3.4 - Cross-Site Request Forgery Update Admin !/usr/local/bin/python Exploit Title: Digirez 3.4 - Cross-Site Request Forgery Update User & Admin Dork: N/A Date: 18.09.2017 Vendor Homepage: http://www.digiappz.com/ Software Link: http://www.digiappz.com/index.asp Demo:...
Digirez 3.4 - Cross-Site Request Forgery (Update Admin) Exploit
Exploit for asp platform in category web applications !/usr/local/bin/python Exploit Title: Digirez 3.4 - Cross-Site Request Forgery Update User & Admin Dork: N/A Date: 18.09.2017 Vendor Homepage: http://www.digiappz.com/ Software Link: http://www.digiappz.com/index.asp Demo:...
Digirez 3.4 - Cross-Site Request Forgery (Update Admin)
!/usr/local/bin/python Exploit Title: Digirez 3.4 - Cross-Site Request Forgery Update User & Admin Dork: N/A Date: 18.09.2017 Vendor Homepage: http://www.digiappz.com/ Software Link: http://www.digiappz.com/index.asp Demo: http://www.digiappz.com/room/index.asp Version: 3.4 Category: Webapps Test...
Digirez 3.4 - Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24157/info Digirez is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authenticati...
digirez-xss.txt
Hello Vulnerable : Digirez Version: 3.4 web : http://www.digiappz.com XSS : 1- http://www.example.com/room/infobook.asp?Roomname=XSS 2- http://www.example.com/room/week.asp?curYear=XSS For Example u can put : 1- http://www.example.com/room/infobook.asp?Roomname='alert1; 2-...
CVE-2007-2880
Multiple cross-site scripting XSS vulnerabilities in Digirez 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Roomname parameter to room/infobook.asp or the 2 curYear parameter to room/week.asp...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Digirez 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Roomname parameter to room/infobook.asp or the 2 curYear parameter to room/week.asp...
CVE-2007-2880
Multiple cross-site scripting XSS vulnerabilities in Digirez 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 Roomname parameter to room/infobook.asp or the 2 curYear parameter to room/week.asp...
CVE-2007-2880
Digirez 3.4 has multiple cross-site scripting (XSS) vulnerabilities that enable remote attackers to inject arbitrary web script or HTML via (1) the Room_name parameter in room/info_book.asp and (2) the curYear parameter in room/week.asp. Root cause: insufficient input sanitization leading to scri...
Multiple XSS in Digirez
Hello Vulnerable : Digirez Version: 3.4 web : http://www.digiappz.com XSS : 1- http://www.example.com/room/infobook.asp?Roomname=XSS 2- http://www.example.com/room/week.asp?curYear=XSS For Example u can put : 1- http://www.example.com/room/infobook.asp?Roomname='scriptalert1;/script 2-...
Digirez 3.4 - Multiple Cross-Site Scripting Vulnerabilities
Digirez 3.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24157/info Digirez is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...
Digirez 3.4 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/24157/info Digirez is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other...
Sql injection
SQL injection vulnerability in infobook.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the bookid parameter...
CVE-2007-0128
SQL injection vulnerability in infobook.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the bookid parameter...
CVE-2007-0128
CVE-2007-0128 describes an SQL injection vulnerability in info_book.asp for Digirez 3.4 and earlier, where the book_id parameter can be manipulated to execute arbitrary SQL commands remotely. Affected software is Digirez (versions up to 3.4 and earlier); the underlying root cause is improper hand...
DigiAppz DigiRez Info_Book.ASP SQL注入漏洞
DigiAppz DigiRez是一款基于ASP的WEB应用程序。 DigiAppz DigiRez不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'InfoBook.ASP'脚本对用户提交的WEB参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息 Digiappz Digirez 3.4 Digiappz Digirez 3.3 Digiappz Digirez 3.2 Digiappz Digirez 3.1 Digiappz Digirez 3.0 目前没有解决方案提供： http://www.digiappz.com/...
DigiRez <= 3.4 (book_id) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== DigiRez : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...
DigiRez 3.4 - 'book_id' SQL Injection
!/usr/bin/perl Script Name: DigiRez : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target = "-1%20union%20select%200,0,0,memberlogin,0,0,0,0,memberlogin,0,0,0,0%20from%20members"; $target =...