EUVD-2009-4828

Malware in sbrugna...

EUVD-2009-4540

Malware in sbrugna...

EUVD-2009-4827

Malware in sbrugna...

Multple I-Escorts Products - 'escorts_search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43249/info Multiple I-Escorts products are prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser...

Multple I-Escorts Products - escorts_search.php Cross-Site Scripting

Multple I-Escorts Products - escortssearch.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43249/info Multiple I-Escorts products are prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may...

Sql injection

Multiple SQL injection vulnerabilities in escortssearch.php in I-Escorts Directory Script and Agency Script, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchname and 2 languages parameters. NOTE: some of these details are obtained from thi...

CVE-2009-4865

CVE-2009-4865 affects the I-Escorts Directory Script and Agency Script, where multiple SQL injection flaws exist in escorts_search.php when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL via the 1) search_name and 2) languages parameters. Root caus...

CVE-2009-4864

CVE-2009-4864 affects the I-Escorts Directory Script and Agency Script (escorts_search.php). The issue is reflected cross-site scripting (XSS) via the parameters (1) search_name and (2) languages, enabling an attacker to inject arbitrary script/HTML in the browser. Public sources corroborate XSS ...

CVE-2009-4865

Multiple SQL injection vulnerabilities in escortssearch.php in I-Escorts Directory Script and Agency Script, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchname and 2 languages parameters. NOTE: some of these details are obtained from thi...

CVE-2009-4864

Multiple cross-site scripting XSS vulnerabilities in escortssearch.php in I-Escorts Directory Script and Agency Script allow remote attackers to inject arbitrary web script or HTML via the 1 searchname and 2 languages parameters. NOTE: some of these details are obtained from third party informati...

CVE-2009-4574

SQL injection vulnerability in countryescorts.php in I-Escorts Directory Script allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

Sql injection

SQL injection vulnerability in countryescorts.php in I-Escorts Directory Script allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

CVE-2009-4574

CVE-2009-4574 describes an SQL injection in country_escorts.php of the I-Escorts Directory Script, exploitable via the country_id parameter to allow remote execution of arbitrary SQL commands. Affected details (product, version, root cause, fixes) are not provided in the connected documents. Some...

CVE-2009-4574

SQL injection vulnerability in countryescorts.php in I-Escorts Directory Script allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

I-Escorts Directory (country_escorts.php country_id) SQL Injection

Exploit for unknown platform in category web applications ================================================================================ I-Escorts Directory countryescorts.php countryid SQL Injection Vulnerability ================================================================================...

I-Escorts Directory SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Vendor: www.i-escorts.co.uk TEAM:ArAB!AN !NFORMAT!ON SeCuR!TY ? Home: WwW.xP10.ME ? ???????????????????????DEV!L'5 of SYST3M?????????????????? Err0r C0N50L3:...

I-Escorts Directory - country_escorts.php?country_id SQL Injection

I-Escorts Directory - countryescorts.php?countryid SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Vendor: www.i-escorts.co.uk TEAM:ArAB!AN !NFORMAT!ON SeCuR!TY ? Home: WwW.xP10.ME ? ???????????????????????DEV!L'5 of SYST3M?????????????????? Err...

I-Escorts Directory - 'country_escorts.php?country_id' SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Vendor: www.i-escorts.co.uk TEAM:ArAB!AN !NFORMAT!ON SeCuR!TY ? Home: WwW.xP10.ME ? ???????????????????????DEV!L'5 of SYST3M?????????????????? Err0r C0N50L3:...