EUVD-2008-2504

Malware in sbrugna...

Excuse Online - 'pwd.asp' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29370/info Excuse Online is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

CVE-2008-2509

SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via the pID parameter...

Sql injection

SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via the pID parameter...

CVE-2008-2509

The CVE-2008-2509 entry describes a SQL injection in pwd.asp of Excuse Online, exploitable via the pID parameter to remotely execute arbitrary SQL. Affected software/feature: Excuse Online, component pwd.asp. Root cause: improper handling of the pID parameter leading to SQL injection (as stated b...

CVE-2008-2509

SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via the pID parameter...

excuseonline-sql.txt

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title :: Excuse Online pwd SQL Injection...

Excuse Online (pwd) SQL Injection Vulnerability

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title :: Excuse Online pwd SQL Injection...

Excuse Online - pwd.asp SQL Injection

Excuse Online - pwd.asp SQL Injection source: https://www.securityfocus.com/bid/29370/info Excuse Online is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Excuse Online - 'pwd.asp' SQL Injection

source: https://www.securityfocus.com/bid/29370/info Excuse Online is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...