Sql injection

Multiple SQL injection vulnerabilities in application/core/MYModel.php in MyClientBase 0.12 allow remote attackers to execute arbitrary SQL commands via the 1 invoicenumber or 2 tags parameter to index.php/invoicesearch...

PT-2012-5035

Name of the Vulnerable Software and Affected Versions MyClientBase version 0.12 Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via the invoice number or tags parameter to the "index.php/invoice searc...

MyClientBase v0.12 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== MyClientBase v0.12 - Multiple Web Vulnerabilities Introduction: ============= MyClientBase is a simple, intuitive, free and open source web based invoice management system developed with freelancers in mind. MCB is and always wil...

MyClientBase 0.12 - Multiple Vulnerabilities

Title: ====== MyClientBase v0.12 - Multiple Web Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=511 VL-ID: ===== 511 Introduction: ============= MyClientBase is a simple, intuitive, free and open source web based invoice management...

MyClientBase v0.12 - Multiple Web Vulnerabilities

Document Title: =============== MyClientBase v0.12 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=511 Release Date: ============= 2012-04-29 Vulnerability Laboratory ID VL-ID: ==================================== 511 Commo...

MyClientBase v0.12 - Multiple Web Vulnerabilities

Document Title: =============== MyClientBase v0.12 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=511 Release Date: ============= 2012-04-29 Vulnerability Laboratory ID VL-ID: ==================================== 511 Commo...

PicoPublisher 2.0 - SQL Injection

Exploit Title : PicoPublisher v2.0 Remote SQL injection Date : 29/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : Pico Software Site : http://pico.no/ Version : 2.0 Price : $29,00 Dork : intext:"Drives med PicoPublisher"...

Invoice Manager CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Invoice Manager CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/invoice-manager-by-stivasoft/31738/ Category:: webapps Demo : http://www.phpjabbers.com/demo/im15/admin.php Greetz: Inj3ct0r Explo...

Booking System for Planyo Multiple VUlnerabilty

Exploit for php platform in category web applications =============================================== Booking System for Planyo Multiple VUlnerabilty =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

Netartmedia iBoutique.MALL - SQL Injection

Netartmedia iBoutique.MALL - SQL Injection Name : Netartmedia iBoutique.MALL SQLi Vulnerability Date : june, 28 2010 Critical Level : HIGH Vendor Url : http://www.netartmedia.net/mall/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

CVE-2010-1486

Multiple cross-site scripting XSS vulnerabilities in invoice.asp in CactuShop before 6.155 allow remote attackers to inject arbitrary web script or HTML via the 1 billing address or 2 shipping address...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in invoice.asp in CactuShop before 6.155 allow remote attackers to inject arbitrary web script or HTML via the 1 billing address or 2 shipping address...

CVE-2010-1486

Multiple cross-site scripting XSS vulnerabilities in invoice.asp in CactuShop before 6.155 allow remote attackers to inject arbitrary web script or HTML via the 1 billing address or 2 shipping address...

CactuShop - User Invoices Persistent Cross-Site Scripting

User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory Information Title: User Invoices Persistent XSS Vulnerability in CactuShop Advisory Id: CORE-2010-0406 Advisory URL: http://www.coresecurity.com/content/cactushop-xss-persistent-vulnerability Date published: 2010-04-20 Date of la...

CVE-2008-4997: Improper Link Resolution Before File Access

dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage...

DEBIAN-CVE-2007-5372

Multiple SQL injection vulnerabilities in a LedgerSMB 1.0.0 through 1.2.7 and b DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via 1 the invoice quantity field or 2 the sort field...

CVE-2007-5372

Multiple SQL injection vulnerabilities in a LedgerSMB 1.0.0 through 1.2.7 and b DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via 1 the invoice quantity field or 2 the sort field...

CVE-2007-5372: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in a LedgerSMB 1.0.0 through 1.2.7 and b DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL commands via 1 the invoice quantity field or 2 the sort field...

PT-2007-2302 · Local · Local Calendar System

Name of the Vulnerable Software and Affected Versions: local Calendar System version 1.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the TEMPLATE DIR parameter to files such as showinvoices.php, showmonth.php, showevents.php, retrieveinvoice.php,...

CVE-2006-5110

Cross-site scripting XSS vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, a different vector than CVE-2006-5074. NOTE: the provenance of this information is unknown; the details are obtained from third party...