EUVD-2006-3024

Malware in sbrugna...

Enthrallweb ePhotos 1.0 (subLevel2.asp) Remote SQL Injection Vulnerability

Title : Enthrallweb ePhotos 1.0 subLevel2.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//subLevel2.asp?CatID=33&SUBID=SQL Example:...

Enthrallweb ePhotos 1.0 (subLevel2.asp) SQL Injection Vulnerability

No description provided by source. Title : Enthrallweb ePhotos 1.0 subLevel2.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL---------------------------------------------------------...

Enthrallweb ePhotos 1.0 - 'subLevel2.asp' SQL Injection

Title : Enthrallweb ePhotos 1.0 subLevel2.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//subLevel2.asp?CatID=33&SUBID=SQL Example:...

Enthrallweb ePhotos 1.0 - subLevel2.asp SQL Injection

Enthrallweb ePhotos 1.0 - subLevel2.asp SQL Injection Title : Enthrallweb ePhotos 1.0 subLevel2.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL---------------------------------------------------------...

Enthrallweb ePhotos 1.0 (subLevel2.asp) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Enthrallweb ePhotos 1.0 subLevel2.asp SQL Injection Vulnerability =================================================================== Title : Enthrallweb ePhotos 1.0...

CVE-2006-3027

Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 CATID parameter in a subphotos.asp and b subLevel2.asp, the 2 ALID parameter in c photo.asp, and the 3 SUBID parameter in d subLevel2.asp...

CVE-2006-3027

Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 CATID parameter in a subphotos.asp and b subLevel2.asp, the 2 ALID parameter in c photo.asp, and the 3 SUBID parameter in d subLevel2.asp...

CVE-2006-3027

CVE-2006-3027 involves Enthrallwebe ePhotos 2.2 and earlier with multiple SQL injection vulnerabilities. The issues arise from unsafely handling user-supplied parameters: CAT_ID (in subphotos.asp and subLevel2.asp), AL_ID (in photo.asp), and SUB_ID (in subLevel2.asp), enabling remote attackers to...

CVE-2006-3027: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 CATID parameter in a subphotos.asp and b subLevel2.asp, the 2 ALID parameter in c photo.asp, and the 3 SUBID parameter in d subLevel2.asp...