243 matches found
CVE-2009-0338
Cross-site scripting XSS vulnerability in incwebblogmanager.asp in DMXReady Blog Manager allows remote attackers to inject arbitrary web script or HTML via the CategoryID parameter in a refer action...
Cross site scripting
Cross-site scripting XSS vulnerability in incwebblogmanager.asp in DMXReady Blog Manager allows remote attackers to inject arbitrary web script or HTML via the CategoryID parameter in a refer action...
Sql injection
SQL injection vulnerability in incwebblogmanager.asp in DMXReady Blog Manager allows remote attackers to execute arbitrary SQL commands via the itemID parameter in a view action...
CVE-2009-0338
The CVE-2009-0338 issue targets DMXReady Blog Manager, specifically the inc_webblogmanager.asp component. The vulnerability is a Cross-site Scripting (XSS) flaw that allows an attacker to inject arbitrary web script or HTML via the CategoryID parameter in a refer action. Impact is described as en...
CVE-2009-0339
SQL injection vulnerability in incwebblogmanager.asp in DMXReady Blog Manager allows remote attackers to execute arbitrary SQL commands via the itemID parameter in a view action...
CVE-2009-0339
The CVE-2009-0339 entry concerns a SQL injection in inc_webblogmanager.asp of the DMXReady Blog Manager, exploitable via the itemID parameter in a view action. This vulnerability allows remote attackers to execute arbitrary SQL commands, with potential impact on confidentiality, integrity, and av...
DMXReady Blog Manager (SQL/XSS)
--------------------------------------------------------- Portal Name: DMXReady Blog Manager SQL/XSS Vendor : http://www.galaxyscripts.com Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : SQL/XSS --------------------------------------------------------- SQL:...
Blog Manager - 'categoryId' Cross-Site Scripting
source: https://www.securityfocus.com/bid/33314/info DMXReady Blog Manager is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal...
Blog Manager - ItemID SQL Injection
Blog Manager - ItemID SQL Injection source: https://www.securityfocus.com/bid/33314/info DMXReady Blog Manager is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues...
Blog Manager - categoryId Cross-Site Scripting
Blog Manager - categoryId Cross-Site Scripting source: https://www.securityfocus.com/bid/33314/info DMXReady Blog Manager is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting thes...
DMXReady Contact Us Manager 1.1 Contents Change
Title : DMXReady Contact Us Manager http://target/path//applications/ContactUsManager/inccontactusmanager.asp Edit - http://target/path//admin/ContactUsManager/addcategory.asp :...
DMXReady Registration Manager 1.1 Contents Change
Title : DMXReady Registration Manager http://target/path//applications/RegistrationManager/incregistrationmanager.asp Edit - http://target/path//admin/RegistrationManager/addcategory.asp :...
DMXReady Links Manager 1.1 Contents Change
Title : DMXReady Links Manager http://target/path//applications/LinksManager/inclinksmanager.asp Edit - http://target/path//admin/LinksManager/addcategory.asp :...
DMXReady Blog Manager XSS / SQL Injection
--------------------------------------------------------- Portal Name: DMXReady Blog Manager SQL/XSS Vendor : http://www.galaxyscripts.com Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : SQL/XSS --------------------------------------------------------- SQL:...
DMXReady Billboard Manager <= 1.1 Remote File Upload Vulnerability
Exploit for unknown platform in category web applications ================================================================== DMXReady Billboard Manager http://target/path//applications/BillboardManager/incbillboardmanager.asp Edit -...
DMXReady PayPal Store Manager 1.1 Contents Change
Title : DMXReady PayPal Store Manager http://target/path//applications/PayPalStoreManager/incpaypalstoremanager.asp Edit - http://target/path//admin/PayPalStoreManager/CategoryManager/list.asp :...
DMXReady Billboard Manager <= 1.1 Remote File Upload Vulnerability
No description provided by source. Title : DMXReady Billboard Manager = 1.1 Remote File Upload Vulnerability Author : "ajann" from Turkey Contact : : S.Page : http://www.dmxready.com $$ : 49.97 $ Dork : inurl:incbillboardmanager.asp?ItemID= DorkEx :...
DMXReady Blog Manager 1.1 File Deletion
Title : DMXReady Blog Manager ajann Exp Delete File : Form Action: http://target/path/includes/sharedscripts/wysiwygeditor/assetmanager/assetmanager.asp?ffilter= Delete File Path: etc...
DMXReady Job Listing 1.1 Contents Change
Title : DMXReady Job Listing http://target/path//applications/JobListingManager/incjoblistingmanager.asp Edit - http://target/path//admin/JobListingManager/CategoryManager/list.asp :...
DMXReady Members Area Manager 1.2 SQL Injection
Title : DMXReady Members Area Manager http://target/path/applications/MembersAreaManager/incmembersareamanager.asp Edit - http://target/path/admin/MembersAreaManager/components/SecurityLevelManager/uploadimagesecuritylevel.asp?cid=SQL Inject Example: USERNAME-...