EUVD-2007-2654

Malware in sbrugna...

EUVD-2008-1642

Malware in sbrugna...

EUVD-2008-1509

Malware in sbrugna...

EUVD-2008-3020

Malware in sbrugna...

Efestech E-Kontor - 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28412/info Efestech E-Kontor is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

EfesTECH Video 5.0 - 'catID' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28532/info EfesTECH Video is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

efestechshop-sql.txt

Title: Efestech Shop v2.0 Sql İnjection Vuln ============================== ================================== + Author : Dr.Kacak + Special Thankz : KnockOut And All My Friends + System 0VerfL0WerZ Group & BuqX Team + Mail : BuqX at Hotmail dot com...

CVE-2008-3030

SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in an urunler action...

Sql injection

SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in an urunler action...

CVE-2008-3030

CVE-2008-3030 is a SQL injection vulnerability in EfesTECH Shop 2.0 (default.asp) that allows remote attackers to inject arbitrary SQL via the cat_id parameter in the urunler action. The connected records corroborate the affected software and the input vector, with CVSSv2 metrics indicating a bas...

CVE-2008-3030

SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in an urunler action...

EfesTECH Shop "cat_id" SQL注入漏洞

BUGTRAQ ID: CNCAN ID：CNCAN-2008070303 EfesTECH Shop是一款基于ASP的WEB应用程序。 EfesTECH Shop不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'default.asp'脚本对用户提交给'catid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 EfesTECH Shop 2.x 目前没有详细解决方案提供： http://www.aspindir.com/Goster/5479...

Efestech Shop 2.0 (cat_id) Remote SQL Injection Vulnerability

No description provided by source. Title: Efestech Shop v2.0 Sql njection Vuln ============================== ================================== + Author : Dr.Kacak + Special Thankz : KnockOut And All My Friends + System 0VerfL0WerZ Group & BuqX Team + Mail : BuqX at Hotmail dot com...

Efestech Shop 2.0 - cat_id SQL Injection

Efestech Shop 2.0 - catid SQL Injection Title: Efestech Shop v2.0 Sql Ä°njection Vuln ============================== ================================== + Author : Dr.Kacak + Special Thankz : KnockOut And All My Friends + System 0VerfL0WerZ Group & BuqX Team + Mail : BuqX at Hotmail dot com...

Efestech Shop 2.0 - 'cat_id' SQL Injection

Title: Efestech Shop v2.0 Sql Ä°njection Vuln ============================== ================================== + Author : Dr.Kacak + Special Thankz : KnockOut And All My Friends + System 0VerfL0WerZ Group & BuqX Team + Mail : BuqX at Hotmail dot com...

Efestech Shop 2.0 (cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Efestech Shop 2.0 catid Remote SQL Injection Vulnerability ============================================================= Script : Efestech Shop v2.0 Verz: 2.0 SQL attack ;...

CVE-2008-1641

SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL commands via the catID parameter...

Sql injection

SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL commands via the catID parameter...

CVE-2008-1641

CVE-2008-1641 is a SQL injection vulnerability in EfesTECH Video 5.0, exploitable via the catID parameter in default.asp. The affected component is the default.asp page of EfesTECH Video 5.0; the underlying cause is injectable SQL through catID, enabling remote command execution. NVD lists a base...

CVE-2008-1641

SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL commands via the catID parameter...