EUVD-2006-6178

Malware in sbrugna...

EUVD-2006-6179

Malware in sbrugna...

Fixit iDMS Pro Image Gallery showfile.asp fid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21282/info Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly sanitize user-supplied input. Successf...

Fixit iDMS Pro Image Gallery filelist.asp Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21282/info Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly sanitize user-supplied input. Successf...

CVE-2006-6196

Cross-site scripting XSS vulnerability in the search functionality in Fixit iDMS Pro Image Gallery allows remote attackers to inject arbitrary web script or HTML via a search field txtsearchtext parameter...

CVE-2006-6195

Multiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to execute arbitrary SQL commands via the 1 showid or 2 parentid parameter to a filelist.asp, or the 3 fid parameter to b showfile.asp...

CVE-2006-6196

CVE-2006-6196 describes a cross-site scripting (XSS) vulnerability in the search functionality of the Fixit iDMS Pro Image Gallery. The issue allows remote attackers to inject arbitrary web script or HTML via the search field (txtsearchtext parameter). The NVD entry lists a CVSSv2 base score of 6...

CVE-2006-6195

Multiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to execute arbitrary SQL commands via the 1 showid or 2 parentid parameter to a filelist.asp, or the 3 fid parameter to b showfile.asp...

CVE-2006-6196

Cross-site scripting XSS vulnerability in the search functionality in Fixit iDMS Pro Image Gallery allows remote attackers to inject arbitrary web script or HTML via a search field txtsearchtext parameter...

aria-idms.txt

Aria-Security Team Advisory Original Advisory : http://www.aria-security.com/forum/showthread.php?t=39 ----------------------------------------------------------- Software: Fixit iDMS Pro Image Gallery Method: SQL Injection And Cross Site Scripting PoC:...

[Aria-Security Team] Fixit iDMS Pro Image Gallery SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://www.aria-security.com/forum/showthread.php?t=39 ----------------------------------------------------------- Software: Fixit iDMS Pro Image Gallery Method: SQL Injection And...

Fixit iDms Pro Image Gallery - 'showfile.asp?fid' SQL Injection

source: https://www.securityfocus.com/bid/21282/info Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly sanitize user-supplied input. Successful exploits of these vulnerabiliti...

Fixit iDms Pro Image Gallery - showfile.asp?fid SQL Injection

Fixit iDms Pro Image Gallery - showfile.asp?fid SQL Injection source: https://www.securityfocus.com/bid/21282/info Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly sanitize...

Fixit iDms Pro Image Gallery - 'filelist.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/21282/info Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly sanitize user-supplied input. Successful exploits of these vulnerabiliti...

Fixit iDms Pro Image Gallery - filelist.asp Multiple SQL Injections

Fixit iDms Pro Image Gallery - filelist.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21282/info Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly...