阿帕比数字资源平台系统mssql注入

简要描述： 一处mssql的注入 详细说明： 厂商： http://gw.apabi.com/ 北京方正阿帕比技术有限公司 用户量比较多： SQL注入点： /AddMyFavourite.asp?lang=gb&DocID= 其中DocID存在sql注入 互联网自动采集案例5枚： http://ebook.nwu.edu.cn/AddMyFavourite.asp?lang=gb&DocID=1 http://dlib.gsjtxy.edu.cn/dlib/AddMyFavourite.asp?lang=gb&DocID=1...

博云非书论文管理系统存在通用型SQL注入

简要描述： 论文管理系统存在通用型SQL注入 详细说明： 注入点：dbid和docid 搜索关键字：inurl:/docinfo.action?dbid= http://202.195.136.150/docinfo.action?dbid=72&docid=40824 http://202.199.163.37/docinfo.action?dbid=72&docid=40619 http://paper.buaalib.com/docinfo.action?dbid=72&docid=5793...

PT-2013-4508

Name of the Vulnerable Software and Affected Versions Coursemill Learning Management System LMS version 6.6 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the docID parameter in the "admindocumentworker.jsp" page. Recommendations Fo...

CVE-2013-3602: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System LMS 6.6 allows remote authenticated users to execute arbitrary SQL commands via the docID parameter...

HP-UX Update for Xserver HPSBUX02225

Check for the Version of Xserver OpenVAS Vulnerability Test HP-UX Update for Xserver HPSBUX02225 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Sql injection

SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter...

CVE-2008-3682

SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter...

CVE-2008-3682

CVE-2008-3682 describes an SQL injection vulnerability in dpage.php of YPN PHP Realty. The underlying issue is unsafely handling the docID parameter, enabling remote attackers to execute arbitrary SQL commands. Documents consistently state: an injection via docID could impact the application, wit...

CVE-2008-3682: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter...

Sql injection

SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter...

CVE-2008-2443

SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter...

CVE-2008-2443

SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter...

CVE-2008-2443: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter...

CVE-2006-6486

SQL injection vulnerability in EasyPage allows remote attackers to execute arbitrary SQL commands via sptrees/default.aspx, possibly involving the docId parameter. Affects EasyPage (component/context not fully specified); root cause is an injection flaw in the handling of inputs to the page. CVSS...

CVE-2006-6486: Undefined Security Weakness

SQL injection vulnerability in EasyPage allows remote attackers to execute arbitrary SQL commands via unspecified vectors in sptrees/default.aspx, possibly involving the docId parameter. NOTE: this issue appears to have been disputed by a third party researcher, stating that SQL injection is not...

CVE-2005-4509

CVE-2005-4509 describes an SQL injection in index.asp for pTools, exploitable via the docID parameter to allow remote execution of arbitrary SQL commands. Affected software is pTools; vulnerability arises from improper handling of input in the docID field. Impact, as stated, includes partial conf...

CVE-2005-4509: Undefined Security Weakness

SQL injection vulnerability in index.asp in pTools allows remote attackers to execute arbitrary SQL commands via the docID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...