121 matches found
CVE-2009-0252
The CVE-2009-0252 issue affects Enthrallweb eReservations (default.asp) where multiple SQL injection vulnerabilities exist. The underlying problem is unsafely handling the (1) Login parameter (username) and (2) Password parameter in the login form, enabling remote attackers to execute arbitrary S...
CVE-2009-0252: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the 1 Login parameter aka username field or the 2 Password parameter aka password field. NOTE: some of these details are obtained from third party...
eReservations SQL Injection
----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG eReservations Auth Bypass Script : eReservations Price : $249.95 save $50.00 : Demo : http://reservations.enthrallweb.us/Login.asp Details : http://enthrallweb.com/detail.asp?productID=16 username : ' or '1...
eReservations (Auth Bypass) SQL Injection Vulnerability
No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG eReservations Auth Bypass Script : eReservations Price : $249.95 save $50.00 : Demo : http://reservations.enthrallweb.us/Login.asp Details :...
eFAQ (Auth Bypass) SQL Injection Vulnerability
No description provided by source. ------C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG eFAQ Auth Bypass SQL Injection Vulnerability Script : eFAQ Price : $49.95 save $50.00 : Demo : http://faq.enthrallweb.us/ eFAQ details :...
eReservations - Authentication Bypass
eReservations - Authentication Bypass ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG eReservations Auth Bypass Script : eReservations Price : $249.95 save $50.00 : Demo : http://reservations.enthrallweb.us/Login.asp Details :...
CVE-2006-6820
myprofile.asp in Enthrallweb eCoupons does not properly validate the MMrecordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MMrecordId parameter...
CVE-2006-6822
myprofile.asp in Enthrallweb eClassifieds does not properly validate the MMrecordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MMrecordId parameter...
CVE-2006-6821
myprofile.asp in Enthrallweb eNews does not properly validate the MMrecordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MMrecordId parameter...
CVE-2006-6822
Vulnerability : In Enthrallweb eClassifieds, myprofile.asp does not properly validate the MM_recordId parameter during profile updates. This allows remote authenticated users to modify certain profile fields of another account by supplying that account’s username in a modified MM_recordId value. ...
CVE-2006-6820
myprofile.asp in Enthrallweb eCoupons does not properly validate the MMrecordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MMrecordId parameter...
CVE-2006-6821
myprofile.asp in Enthrallweb eNews does not properly validate the MMrecordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MMrecordId parameter...
CVE-2006-6822
myprofile.asp in Enthrallweb eClassifieds does not properly validate the MMrecordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MMrecordId parameter...
CVE-2006-6820
The CVE-2006-6820 issue concerns Enthrallweb eCoupons, where myprofile.asp does not properly validate the MM_recordId parameter during profile updates. This allows remote authenticated users to modify certain profile fields of another account by supplying that account’s username in a modified MM_...
CVE-2006-6821
The CVE concerns Enthrallweb eNews: myprofile.asp fails to validate MM_recordId during profile updates, allowing remote authenticated users to change certain fields of another account by supplying that account’s username in MM_recordId. No remediation details are provided in the supplied documents.
CVE-2006-6821: Undefined Security Weakness
myprofile.asp in Enthrallweb eNews does not properly validate the MMrecordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MMrecordId parameter...
CVE-2006-6820: Undefined Security Weakness
myprofile.asp in Enthrallweb eCoupons does not properly validate the MMrecordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MMrecordId parameter...
CVE-2006-6822: Undefined Security Weakness
myprofile.asp in Enthrallweb eClassifieds does not properly validate the MMrecordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MMrecordId parameter...