AutoDealer 1 / 2 SQL Injection

Exploit Title:MSSQLi Vulnerability in AutoDealer Ver.1 and Ver.2 Version: Web Application vendor :http://www.aspsiteware.com/Auto.asp Date: 30 apr,2010 Dork:Copyright © 2010 ASP SiteWare. All rights reserved. Author:Sid3^effects Code :...

AutoDealer 1.0/2.0 - MSSQL Injection

vendor :http://www.aspsiteware.com/Auto.asp Date: 30 apr,2010 Dork:Copyright © 2010 ASP SiteWare. All rights reserved. -------------------------------------------------------------------------------------- Sid3^effects aKa HaRi Greetz to all Andhra Hackers and ICW MemebersIndian Cyber Warriors...

AutoDealer Ver.1 and Ver.2 MSSQLi Vulnerability

Exploit for asp platform in category web applications =============================================== AutoDealer Ver.1 and Ver.2 MSSQLi Vulnerability =============================================== vendor :http://www.aspsiteware.com/Auto.asp Date: 30 apr,2010 Dork:Copyright © 2010 ASP SiteWare...

AutoDealer 1.02.0 - MSSQL Injection

AutoDealer 1.02.0 - MSSQL Injection vendor :http://www.aspsiteware.com/Auto.asp Date: 30 apr,2010 Dork:Copyright © 2010 ASP SiteWare. All rights reserved. -------------------------------------------------------------------------------------- Sid3^effects aKa HaRi Greetz to all Andhra Hackers and...

CVE-2010-1595

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

DEBIAN-CVE-2010-1594

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1595

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

CVE-2010-1594

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1594

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

Sql injection

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

CVE-2010-1594

OCS Inventory NG 1.02.1 is affected by multiple Cross‑Site Scripting (XSS) vulnerabilities in ocsreports/index.php, allowing remote attackers to inject arbitrary web script or HTML via (1) the query string, (2) the BASE parameter, or (3) the ega_1 parameter. The issue is documented across CVE-201...

CVE-2010-1595

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

CVE-2010-1594

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1595

CVE-2010-1595 affects OCS Inventory NG 1.02.1, specifically the ocsreports/index.php component, where multiple SQL injection vulnerabilities exist via the c, val_1, and onglet_bis parameters. The issue allows remote attackers to execute arbitrary SQL commands (impact: partial confidentiality, int...

CVE-2010-1595

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

CVE-2010-1594

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1594: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbitrary web script or HTML via 1 the query string, 2 the BASE parameter, or 3 the ega1 parameter. NOTE: some of these details are obtained from third party...

CVE-2010-1595: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL commands via the 1 c, 2 val1, or 3 ongletbis parameter...

CVE-2010-0874

Unspecified vulnerability in the Communications - Oracle Communications Unified Inventory Management component in Oracle Industry Product Suite 7.1 allows remote attackers to affect integrity via unknown vectors...