Erolife AjxGaleri VT - Database Disclosure

Erolife AjxGaleri VT - Database Disclosure ============================================================================== » Note : Mutlu Yillar Millettt ============================================================================== » Erolife AjxGaleri VT Database Disclosure Vulnerability...

CVE-2007-5272

SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL commands via the id parameter in a goster kat action...

CVE-2007-5272

SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL commands via the id parameter in a goster kat action...

CVE-2007-5272: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL commands via the id parameter in a goster kat action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set to iletisim, allow remote attackers to inject arbitrary web script or HTML via the 1 Adiniz and 2 Soyadiniz parameters; and possibly other unspecified vectors. NOTE: the provenance...

Sql injection

SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3989

CVE-2007-3989 describes multiple reflected XSS vulnerabilities in the Dora Emlak 1.0 web app, specifically in default.asp when goster is set to iletisim. The vulnerabilities allow injection of arbitrary script/HTML via the Adiniz and Soyadiniz parameters (and possibly other vectors). Affected com...

CVE-2007-3990: Undefined Security Weakness

SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-3989: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set to iletisim, allow remote attackers to inject arbitrary web script or HTML via the 1 Adiniz and 2 Soyadiniz parameters; and possibly other unspecified vectors. NOTE: the provenance...

Muratsoft Haber Portal v3.6 (tr) SQL Injection Vulnerability

Muratsoft Haber Portal v3.6 tr SQL Injection Vulnerability Author : ASIANEAGLE Site : www.asianeagle.org Contact: [email protected] Link : http://www.aspindir.com/Goster/4350 Demo Portal : http://www.muratsoft.com/haber/www/ Price of Portal: 300YTL // Good money for Bad Script Exploit :...