PT-2011-1915

Name of the Vulnerable Software and Affected Versions iScripts ReserveLogic version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the pid parameter in the packagedetails.php file. Recommendations For iScripts ReserveLogic version 1.0,...

CVE-2010-4983: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2853

SQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote attackers to execute arbitrary SQL commands via the productid parameter...

CVE-2010-2853

CVE-2010-2853 : SQL injection in iScripts VisualCaster, in flashPlayer/playVideo.php via the product_id parameter, enabling remote arbitrary SQL execution. Affected: VisualCaster component; root cause is improper input handling leading to SQL injection. CVSSv2 base score 7.5 (HIGH): Network acces...

CVE-2010-2853: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote attackers to execute arbitrary SQL commands via the productid parameter...

iScripts MultiCart 2.2 Multiple SQL Injection Vulnerability

iScripts MultiCart 2.2 Multiple SQL Injection Vulnerability Name iScripts MultiCart Vendor http://www.iscripts.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-03-07 X. INDEX I. ABOUT THE...

iScripts SocialWare 2.2.x Multiple Remote Vulnerability

iScripts SocialWare 2.2.x Multiple Remote Vulnerability Name iScripts SocialWare Vendor http://www.iscripts.com Versions Affected 2.2.x Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-03-07 X. INDEX I. ABOUT THE...

iScripts ReserveLogic 1.0 SQL Injection Vulnerability

iScripts ReserveLogic 1.0 SQL Injection Vulnerability Name iScripts ReserveLogic Vendor http://www.iscripts.com Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-01-07 X. INDEX I. ABOUT THE...

iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability

iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability Name iScripts CyberMatch Vendor http://www.iscripts.com Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-02-07 X. INDEX I. ABOUT THE...

REVISION: iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities

iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities Name iScripts EasySnaps Vendor http://www.iscripts.com Versions Affected 2.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-01-07 X. INDEX I. ABOUT THE...

iScripts MultiCart 2.2 SQL Injection

iScripts MultiCart 2.2 Multiple SQL Injection Vulnerability Name iScripts MultiCart Vendor http://www.iscripts.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-03-07 X. INDEX I. ABOUT THE...

iScripts MultiCart 2.2 - Multiple SQL Injections

iScripts MultiCart 2.2 - Multiple SQL Injections iScripts MultiCart 2.2 Multiple SQL Injection Vulnerability Name iScripts MultiCart Vendor http://www.iscripts.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail...

iScripts EasyBiller Cross Site Scripting

$------------------------------------------------------------------------------------------------------------------- $ iScripts EasyBiller Cross Site Scripting Vulnerabilities $ Author : Sangteamtham $ Home : Hcegroup.net $ Download : http://www.iscripts.com/easybiller/ $ Date : 02/07/2010 $ Emai...

iScripts SocialWare 2.2.x Shell Upload

/iScripts SocialWare 2.2.x Arbitrary File Upload Vulnerability Name iScripts SocialWare Vendor http://www.iscripts.com Versions Affected 2.2.x Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-02-07 X. INDEX I. ABOUT T...

iscripts Socialware 2.2.x - Multiple Vulnerabilities

iscripts Socialware 2.2.x - Multiple Vulnerabilities /iScripts SocialWare 2.2.x Multiple Remote Vulnerability Name iScripts SocialWare Vendor http://www.iscripts.com Versions Affected 2.2.x Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at...

iScripts MultiCart 2.2 - Multiple SQL Injections

iScripts MultiCart 2.2 Multiple SQL Injection Vulnerability Name iScripts MultiCart Vendor http://www.iscripts.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-03-07 X. INDEX I. ABOUT THE...

iscripts Socialware 2.2.x - Multiple Vulnerabilities

/iScripts SocialWare 2.2.x Multiple Remote Vulnerability Name iScripts SocialWare Vendor http://www.iscripts.com Versions Affected 2.2.x Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-03-07 X. INDEX I. ABOUT THE...

CVE-2010-2624

Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 comment parameter to addcomments.php, 2 values parameter to tagsdetails.php, or 3 begin parameter to greetings.php...

Sql injection

Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 comment parameter to addcomments.php, 2 values parameter to tagsdetails.php, or 3 begin parameter to greetings.php...

CVE-2010-2624

Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 comment parameter to addcomments.php, 2 values parameter to tagsdetails.php, or 3 begin parameter to greetings.php...