6 matches found
EfesTECH Video 5.0 - 'catID' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28532/info EfesTECH Video is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...
CVE-2008-1641
SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL commands via the catID parameter...
CVE-2008-1641
SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL commands via the catID parameter...
CVE-2008-1641
CVE-2008-1641 is a SQL injection vulnerability in EfesTECH Video 5.0, exploitable via the catID parameter in default.asp. The affected component is the default.asp page of EfesTECH Video 5.0; the underlying cause is injectable SQL through catID, enabling remote command execution. NVD lists a base...
EfesTECH Video 5.0 - 'catID' SQL Injection
source: https://www.securityfocus.com/bid/28532/info EfesTECH Video is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...
EfesTECH Video 5.0 - catID SQL Injection
EfesTECH Video 5.0 - catID SQL Injection source: https://www.securityfocus.com/bid/28532/info EfesTECH Video is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...