Enthrallweb eHomes homeDetail.asp AD_ID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploi...

CVE-2006-6204: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to a dircat.asp; the 2 sid parameter to b dirSub.asp; the 3 TYPEID parameter to c types.asp; the 4 ADID parameter to d homeDetail.asp; the 5 cat parameter ...

PT-2006-6834 · Enthrallweb · Enthrallweb Ehomes

Name of the Vulnerable Software and Affected Versions: Enthrallweb eHomes affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in various parameters, including the cid parameter to...