CVE-2010-5034

SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbitrary SQL commands via the planid parameter...

CVE-2010-5036

SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter...

CVE-2010-5035

CVE-2010-5035 is an XSS vulnerability in iScripts eSwap 2.0, affecting the search.php script via the txtHomeSearch parameter. The underlying issue is a failure to properly sanitize input, enabling remote attackers to inject arbitrary script/HTML through the search field. The NVD entry lists a CVS...

CVE-2010-5036

CVE-2010-5036 affects iScripts eSwap 2.0, where addsale.php is vulnerable to SQL injection via the type parameter. The vulnerability allows remote attackers to potentially manipulate the database, with a CVSSv2 base score of 7.5 (HIGH) and network-based, low-complexity conditions, authenticated a...

CVE-2010-5034

CVE-2010-5034 concerns iScripts EasyBiller 1.1, where viewhistorydetail.php has a SQL injection vulnerability exposed through the planid parameter. The underlying issue is unsafely constructed SQL queries allowing remote attackers to execute arbitrary SQL commands. The connected documents confirm...

PT-2011-1971

Name of the Vulnerable Software and Affected Versions iScripts eSwap version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the type parameter in the "addsale.php" file. Recommendations For iScripts eSwap version 2.0, consider restricting...

PT-2011-1970

Name of the Vulnerable Software and Affected Versions iScripts eSwap version 2.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the txtHomeSearch parameter in the "search.php" file, which is also referred...

PT-2011-1969

Name of the Vulnerable Software and Affected Versions iScripts EasyBiller version 1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the planid parameter in the "viewhistorydetail.php" file. Recommendations For iScripts EasyBiller version 1.1...

CVE-2010-5035: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter aka the search field. NOTE: some of these details are obtained from third party information...

CVE-2010-5036: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter...

CVE-2010-5034: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbitrary SQL commands via the planid parameter...

CVE-2010-4983

SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

Sql injection

SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4983

SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4980

Summary of CVE-2010-4980 : This vulnerability affects iScripts ReserveLogic (versions 1.0 and 1.1) where the vulnerable input is the pid parameter in packagedetails.php (and/or id parameter in ReserveLogic variants). The underlying issue is SQL injection, allowing remote attackers to execute arbi...

CVE-2010-4983

SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4983

CVE-2010-4983 describes a SQL injection in profile.php of iScripts CyberMatch 1.0, exploitable via the id parameter to execute arbitrary SQL commands. Impact includes partial confidentiality, integrity, and availability (CVSS v2 base score 7.5). The connected documents do not provide vendor/patch...

PT-2011-1918

Name of the Vulnerable Software and Affected Versions iScripts CyberMatch version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "profile.php" file. Recommendations For iScripts CyberMatch version 1.0, avoid using...

CVE-2010-4980: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...