EUVD-2006-6187

Malware in sbrugna...

EUVD-2006-6188

Malware in sbrugna...

Enthrallweb eHomes result.asp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploi...

Enthrallweb eHomes homeDetail.asp AD_ID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploi...

Enthrallweb eHomes compareHomes.asp Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploi...

Enthrallweb eHomes 1.0 - Multiple (SQL/XSS) Vulnerabilities

No description provided by source. Title : Enthrallweb eHomes 1.0 Multiple SQL/XSS Vulnerabilities Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL---------------------------------------------------------...

Enthrallweb eHomes result.asp Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploi...

Enthrallweb eHomes 1.0 Multiple (SQL/XSS) Vulnerabilities

No description provided by source. Title : Enthrallweb eHomes 1.0 Multiple SQL/XSS Vulnerabilities Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL---------------------------------------------------------...

Enthrallweb eHomes 1.0 Multiple (SQL/XSS) Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= Enthrallweb eHomes 1.0 Multiple SQL/XSS Vulnerabilities ========================================================= Title : Enthrallweb eHomes 1.0 Multiple SQL/XSS Vulnerabilities...

Enthrallweb eHomes 1.0 - Multiple (SQL Injection Cross-Site Scripting) Vulnerabilities

Enthrallweb eHomes 1.0 - Multiple SQL Injection Cross-Site Scripting Vulnerabilities Title : Enthrallweb eHomes 1.0 Multiple SQL/XSS Vulnerabilities Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL---------------------------------------------------------...

Enthrallweb eHomes 1.0 - Multiple (SQL Injection / Cross-Site Scripting) Vulnerabilities

Title : Enthrallweb eHomes 1.0 Multiple SQL/XSS Vulnerabilities Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//result.asp?city=&State=&amaxprice=10000000&abedrooms=&cat=&aminprice=SQL...

CVE-2006-6205

Multiple cross-site scripting XSS vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web script or HTML via the 1 city or 2 State parameter...

CVE-2006-6204

Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to a dircat.asp; the 2 sid parameter to b dirSub.asp; the 3 TYPEID parameter to c types.asp; the 4 ADID parameter to d homeDetail.asp; the 5 cat parameter ...

CVE-2006-6204

Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to a dircat.asp; the 2 sid parameter to b dirSub.asp; the 3 TYPEID parameter to c types.asp; the 4 ADID parameter to d homeDetail.asp; the 5 cat parameter ...

CVE-2006-6204

CVE-2006-6204 affects Enthrallweb eHomes. Concrete details across sources show multiple SQL injection vulnerabilities in the web application, exploitable via parameters such as cid (dircat.asp), sid (dirSub.asp), TYPE_ID (types.asp), AD_ID (homeDetail.asp), cat (result.asp), and aminprice/amaxpri...

CVE-2006-6205

CVE-2006-6205 affects Enthrallweb eHomes; the vulnerability is multiple XSS in result.asp via the city or State parameter. Connected PT-2006-6835 notes affected software but does not specify vulnerable versions or a fixed release, and no remediation is provided in the sources. Other records reite...

CVE-2006-6205

Multiple cross-site scripting XSS vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web script or HTML via the 1 city or 2 State parameter...

PT-2006-6835 · Enthrallweb · Enthrallweb Ehomes

Name of the Vulnerable Software and Affected Versions: Enthrallweb eHomes affected versions not specified Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the city or State...

PT-2006-6834 · Enthrallweb · Enthrallweb Ehomes

Name of the Vulnerable Software and Affected Versions: Enthrallweb eHomes affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in various parameters, including the cid parameter to...

ehomes [multiples injections sql]

vendor site: http://enthrallweb.us/ product : ehomes bug:injection sql risk : medium injection sql : /dircat.asp?cid='sql /dirSub.asp?sid='sql /types.asp?TYPEID='sql /homeDetail.asp?ADID='sql /result.asp?city=1&cat='sql /compareHomes.asp?compare='sql /compareHomes.asp?compare=Compare&clear='sql...