EUVD-2005-1416

Malware in sbrugna...

EUVD-2007-3767

Malware in sbrugna...

EnViVo!CMS Default.ASP ID Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24860/info enVivo!CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Sql injection

SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action. NOTE: this is probably different from CVE-2005-1413.4...

CVE-2007-3783

SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action. NOTE: this is probably different from CVE-2005-1413.4...

CVE-2007-3783

SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action. NOTE: this is probably different from CVE-2005-1413.4...

CVE-2007-3783

CVE-2007-3783 describes a SQL injection vulnerability in enVivo!CMS, exploitable through the ID parameter of article actions in default.asp. The underlying issue allows remote attackers to execute arbitrary SQL commands and potentially access or modify data, as indicated in the NVD entry. The des...

CVE-2007-3783: Undefined Security Weakness

SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via the ID parameter in an article action. NOTE: this is probably different from CVE-2005-1413.4...

envivocms-sql.txt

Dear [email protected], durito damagelab -duritoatmaildotru- reported SQL injection vulnerability in enVivo!CMS through ID parameter of default.asp. Example: http://www.example.com/default.asp?action=article&ID=-1+or+1=SELECT+TOP+1+username+from+users-- Original message in Russian:...

EnViVo!CMS - 'default.asp?ID' SQL Injection

source: https://www.securityfocus.com/bid/24860/info enVivo!CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

EnViVo!CMS - default.asp?ID SQL Injection

EnViVo!CMS - default.asp?ID SQL Injection source: https://www.securityfocus.com/bid/24860/info enVivo!CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...

SQL-инъекция в enVivo!CMS

Здравствуйте, 3APA3A. Software: enVivo!CMS Vendor: www.envivosoft.com Vulnerability: SQL-инъекция Risk: высокий Date: 6.07.2007 discovered by durito damagelab -duritoatmaildotru- HTTP: durito.narod.ru www.damagelab.org +:| Details |: SQL-инъекция в скрипте default.asp +:| Экплойт |:...

CVE-2005-1413

Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the 1 username or 2 password parameters to adminlogin.asp, or the 3 searchstring and possibly 4 ID parameters to default.asp...

CVE-2005-1413

CVE-2005-1413 describes multiple SQL injection flaws in enVivo!CMS that allow remote attackers to execute arbitrary SQL commands and potentially gain privileges. The vulnerabilities are triggered through the username and password parameters to admin_login.asp, and through searchstring and possibl...

CVE-2005-1413: Undefined Security Weakness

Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the 1 username or 2 password parameters to adminlogin.asp, or the 3 searchstring and possibly 4 ID parameters to default.asp...

[SA15173] enVivo!CMS SQL Injection Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: enVivo!CMS SQL Injection Vulnerabilities SECUNIA...