CVE-2008-2865

The CVE-2008-2865 entry concerns a SQL injection vulnerability in Kalptaru Infotech PHP Site Lock 2.0, exploitable via the articleid parameter in a show_article action. The underlying issue is unsafe SQL construction in index.php that allows remote attackers to execute arbitrary SQL commands. Imp...

CVE-2008-2865: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a showarticle action...

CVE-2008-2791

SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2791

SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2791

SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2791

CVE-2008-2791 describes a SQL injection vulnerability in the Kalptaru Infotech Comparison Engine Power Script 1.0, specifically in the file or process related to product.detail.php . The underlying cause is an unsafely handled id parameter that allows remote attackers to inject arbitrary SQL comm...

CVE-2006-6110

Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the 1 vjob parameter in publicationslist.asp or 2 InfoID parameter in publicationview.asp...

CVE-2006-6110

CVE-2006-6110 describes multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System. The affected components are the web entry points publications_list.asp (parameter vjob) and publication_view.asp (parameter InfoID). Exploitation would allow remote attackers t...

CVE-2006-6110

Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the 1 vjob parameter in publicationslist.asp or 2 InfoID parameter in publicationview.asp...

CVE-2006-6110: Undefined Security Weakness

Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the 1 vjob parameter in publicationslist.asp or 2 InfoID parameter in publicationview.asp...

CVE-2006-6072

SQL injection vulnerability in bpg/publicationslist.asp in BPG-InfoTech Easy Publisher and Smart Publisher//Pro 2.7.7 allows remote attackers to execute arbitrary SQL commands via the vjob parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-6072

CVE-2006-6072: SQL injection in BPG-InfoTech Easy Publisher and Smart Publisher/Pro 2.7.7 via the vjob parameter in bpg/publications_list.asp. Root cause: unsafe SQL construction allowing remote execution of arbitrary commands. Impact: remote attacker could execute arbitrary SQL, with partial con...

CVE-2006-6072: Undefined Security Weakness

SQL injection vulnerability in bpg/publicationslist.asp in BPG-InfoTech Easy Publisher and Smart Publisher//Pro 2.7.7 allows remote attackers to execute arbitrary SQL commands via the vjob parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

Microsoft Infotech存储库itss.dll堆破坏漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Infotech存储系统库（itss.dll）是用于处理CHM/ITS格式文件的函数库。Microsoft将CHM文件归为危险的文件，类似于可执行文件。但攻击者可以通过诱骗用户反编译恶意的CHM文件触发itss.dll中的堆溢出漏洞，导致执行任意代码。 请注意如果用户反编译了恶意的CHM文件，即使没有打开该文件也可以触发这个漏洞。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows 2000...

CVE-2006-2297

Heap-based buffer overflow in Microsoft Infotech Storage System Library itss.dll allows user-assisted attackers to execute arbitrary code via a crafted CHM / ITS file that triggers the overflow while decompiling...

Heap overflow

Heap-based buffer overflow in Microsoft Infotech Storage System Library itss.dll allows user-assisted attackers to execute arbitrary code via a crafted CHM / ITS file that triggers the overflow while decompiling...

CVE-2006-2297

The CVE-2006-2297 entry documents a heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) that can be triggered by a crafted CHM/ITS file during decompiling, enabling user-assisted arbitrary code execution. Connected advisories (e.g., CPAI-2006-195) describe the flaw ...

CVE-2006-2297: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Microsoft Infotech Storage System Library itss.dll allows user-assisted attackers to execute arbitrary code via a crafted CHM / ITS file that triggers the overflow while decompiling...

Microsoft Infotech Storage Library - Heap Corruption

Microsoft Infotech Storage Library - Heap Corruption source: https://www.securityfocus.com/bid/17926/info Microsoft Windows is susceptible to a heap-corruption vulnerability while attempting to read specially crafted CHM or ITS files. This occurs in the 'ITSS.DLL' library. This vulnerability allo...