brisket.net XSS vulnerability

Vulnerable URL: https://www.brisket.net/display.asp?ControlReset=True=1"...

EzPub Simple Classic ASP CMS - SQL Injection

EzPub Simple Classic ASP CMS - SQL Injection Title: EzPub - Simple Classic ASP CMS Vulnerable to SQL Injection Vendor: http://www.soft4web.ro Found by: p0pc0rn 08/03/2011 Dork: intext:"Powered by EZPub" SQL - Microsoft JET Database Engine error ------------------------------------------...

CVE-2006-7231

SQL injection vulnerability in display.asp in Civica Software Civica allows remote attackers to execute arbitrary SQL commands via the Entry parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-7231: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in display.asp in Civica Software Civica allows remote attackers to execute arbitrary SQL commands via the Entry parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6031: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Greater Cincinnati Internet Solutions GCIS ASPCart allow remote attackers to execute arbitrary SQL commands via 1 the prodid parameter in a prodetails.asp; 2 the page parameter in b display.asp; the 3 custid, 4 item, 5 price, 6 custom, 7 department, 8...

Civica - Display.asp SQL Injection

Civica - Display.asp SQL Injection source: https://www.securityfocus.com/bid/20354/info Civica is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Civica - 'Display.asp' SQL Injection

source: https://www.securityfocus.com/bid/20354/info Civica is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

CVE-2006-2992: Undefined Security Weakness

Cross-site scripting XSS vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keym parameter...