4698 matches found
Sql injection
Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...
CVE-2010-1733
Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...
OCS Inventory NG Server <= 1.3.1 (login) Remote Authentication Bypass
Exploit for php platform in category web applications ===================================================================== OCS Inventory NG Server OCS Inventory NG function $id return document.getElementByIdid; function $$id return $id.options$id.options.selectedIndex.value; function bypass...
OCS Inventory NG Server 1.3.1 - LOGIN Remote Authentication Bypass
OCS Inventory NG Server 1.3.1 - LOGIN Remote Authentication Bypass OCS Inventory NG = 1.3.1 login Remote Authentication Bypass function $id return document.getElementByIdid; function $$id return $id.options$id.options.selectedIndex.value; function bypass $'log'.action = $'ocsreports'.value +...
OCS Inventory NG Server 1.3.1 - 'LOGIN' Remote Authentication Bypass
OCS Inventory NG = 1.3.1 login Remote Authentication Bypass function $id return document.getElementByIdid; function $$id return $id.options$id.options.selectedIndex.value; function bypass $'log'.action = $'ocsreports'.value + $$'meth' + '?lang=' + $$'lang'; if $$'type' == 0 $'login'.value = "'...
CVE-2010-1733
Summary: CVE-2010-1733 affects OCS Inventory NG before 1.02.3 with multiple SQL injection vulnerabilities. The two exploitable vectors are: (1) multiple inventory fields in the search form via index.php, and (2) the Software name field in the All softwares search form via index.php. The root caus...
CVE-2010-1733
Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...
CVE-2010-1733
Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...
OCS Inventory NG < 1.02.3 Multiple Vulnerabilities
OCS Inventory NG is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
AutoDealer 1 / 2 SQL Injection
Exploit Title:MSSQLi Vulnerability in AutoDealer Ver.1 and Ver.2 Version: Web Application vendor :http://www.aspsiteware.com/Auto.asp Date: 30 apr,2010 Dork:Copyright © 2010 ASP SiteWare. All rights reserved. Author:Sid3^effects Code :...
AutoDealer 1.02.0 - MSSQL Injection
AutoDealer 1.02.0 - MSSQL Injection vendor :http://www.aspsiteware.com/Auto.asp Date: 30 apr,2010 Dork:Copyright © 2010 ASP SiteWare. All rights reserved. -------------------------------------------------------------------------------------- Sid3^effects aKa HaRi Greetz to all Andhra Hackers and...
AutoDealer Ver.1 and Ver.2 MSSQLi Vulnerability
Exploit for asp platform in category web applications =============================================== AutoDealer Ver.1 and Ver.2 MSSQLi Vulnerability =============================================== vendor :http://www.aspsiteware.com/Auto.asp Date: 30 apr,2010 Dork:Copyright © 2010 ASP SiteWare...
AutoDealer 1.0/2.0 - MSSQL Injection
vendor :http://www.aspsiteware.com/Auto.asp Date: 30 apr,2010 Dork:Copyright © 2010 ASP SiteWare. All rights reserved. -------------------------------------------------------------------------------------- Sid3^effects aKa HaRi Greetz to all Andhra Hackers and ICW MemebersIndian Cyber Warriors...
CVE-2010-1594
Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...
CVE-2010-1595
Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...
Sql injection
Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...
CVE-2010-1595
Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...
DEBIAN-CVE-2010-1594
Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...
CVE-2010-1594
Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...