CVE-2010-1054: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ParsCMS allow remote attackers to execute arbitrary SQL commands via the RP parameter to 1 fadefault.asp and 2 endefault.asp...

parscms-xss.txt

--------------------------------------------------------- Portal Name: Pars Cms Vendor : http://Parscms.com Vulnerable File : faDefault.asp Author : PouyaServer , [email protected] Vulnerability : XSS Cross site scripting ---------------------------------------------------------...