EUVD-2006-6187

Malware in sbrugna...

EUVD-2006-6188

Malware in sbrugna...

Enthrallweb eHomes result.asp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploi...

Enthrallweb eHomes homeDetail.asp AD_ID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploi...

Enthrallweb eHomes 1.0 - Multiple (SQL/XSS) Vulnerabilities

No description provided by source. Title : Enthrallweb eHomes 1.0 Multiple SQL/XSS Vulnerabilities Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL---------------------------------------------------------...

Enthrallweb eHomes 1.0 Multiple (SQL/XSS) Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= Enthrallweb eHomes 1.0 Multiple SQL/XSS Vulnerabilities ========================================================= Title : Enthrallweb eHomes 1.0 Multiple SQL/XSS Vulnerabilities...

Enthrallweb eHomes 1.0 - Multiple (SQL Injection / Cross-Site Scripting) Vulnerabilities

Title : Enthrallweb eHomes 1.0 Multiple SQL/XSS Vulnerabilities Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//result.asp?city=&State=&amaxprice=10000000&abedrooms=&cat=&aminprice=SQL...

Enthrallweb eHomes 1.0 - Multiple (SQL Injection Cross-Site Scripting) Vulnerabilities

Enthrallweb eHomes 1.0 - Multiple SQL Injection Cross-Site Scripting Vulnerabilities Title : Enthrallweb eHomes 1.0 Multiple SQL/XSS Vulnerabilities Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL---------------------------------------------------------...

CVE-2006-6205

Multiple cross-site scripting XSS vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web script or HTML via the 1 city or 2 State parameter...

CVE-2006-6204

Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to a dircat.asp; the 2 sid parameter to b dirSub.asp; the 3 TYPEID parameter to c types.asp; the 4 ADID parameter to d homeDetail.asp; the 5 cat parameter ...

CVE-2006-6205

CVE-2006-6205 affects Enthrallweb eHomes; the vulnerability is multiple XSS in result.asp via the city or State parameter. Connected PT-2006-6835 notes affected software but does not specify vulnerable versions or a fixed release, and no remediation is provided in the sources. Other records reite...

CVE-2006-6204

Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to a dircat.asp; the 2 sid parameter to b dirSub.asp; the 3 TYPEID parameter to c types.asp; the 4 ADID parameter to d homeDetail.asp; the 5 cat parameter ...

CVE-2006-6205

Multiple cross-site scripting XSS vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web script or HTML via the 1 city or 2 State parameter...

CVE-2006-6205: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web script or HTML via the 1 city or 2 State parameter...

PT-2006-6835 · Enthrallweb · Enthrallweb Ehomes

Name of the Vulnerable Software and Affected Versions: Enthrallweb eHomes affected versions not specified Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the city or State...

PT-2006-6834 · Enthrallweb · Enthrallweb Ehomes

Name of the Vulnerable Software and Affected Versions: Enthrallweb eHomes affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in various parameters, including the cid parameter to...

CVE-2006-6204: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to a dircat.asp; the 2 sid parameter to b dirSub.asp; the 3 TYPEID parameter to c types.asp; the 4 ADID parameter to d homeDetail.asp; the 5 cat parameter ...

Enthrallweb eHomes - result.asp Multiple Cross-Site Scripting Vulnerabilities

Enthrallweb eHomes - result.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly...

Enthrallweb eHomes - 'result.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could...