EUVD-2006-4859

Malware in sbrugna...

ECardPro 2.0 Search.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20080/info ECardPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

ECardProv2.0.txt

Vulnerability Report Title : ECardPro v2.0search.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.keyvan1.com Exploit; Data: MSSQL http://target/path/search.asp?keyword='SQL HERE Example: search.asp?keyword='AND%201=convertint,%20@@servicename == MSSQL Service Name...

[SA22013] ECardPro "keyword" SQL Injection Vulnerability

TITLE: ECardPro "keyword" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA22013 VERIFY ADVISORY: http://secunia.com/advisories/22013/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: ECardPro 2.x http://secunia.com/product/11997/ DESCRIPTION: ajann has...

CVE-2006-4872

SQL injection vulnerability in search.asp in Keyvan1 aka Keyvan Janghorbani ECardPro 2.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2006-4872

The CVE-2006-4872 entry describes an SQL injection in Keyvan1 (Keyvan Janghorbani) ECardPro 2.0, exploitable via the keyword parameter in search.asp. The affected component is the search functionality (search.asp) and the underlying cause is an SQL injection allowing remote execution of arbitrary...

CVE-2006-4872

SQL injection vulnerability in search.asp in Keyvan1 aka Keyvan Janghorbani ECardPro 2.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

ECardPro v2.0(search.asp) Remote SQL Injection Vulnerability

Vulnerability Report Title : ECardPro v2.0search.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.keyvan1.com Exploit; Data: MSSQL http://target/path/search.asp?keyword='SQL HERE Example: search.asp?keyword='AND201=convertint,20@@servicename == MSSQL Service Name Adm...

ECardPro 2.0 - search.asp SQL Injection

ECardPro 2.0 - search.asp SQL Injection source: https://www.securityfocus.com/bid/20080/info ECardPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

ECardPro 2.0 - 'search.asp' SQL Injection

source: https://www.securityfocus.com/bid/20080/info ECardPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...