CVE-2008-1859

SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

CVE-2008-1859

CVE-2008-1859 is a confirmed SQL injection in iScripts SocialWare . The vulnerability resides in events.php and is exploitable via the id parameter in a show action, enabling remote attackers to execute arbitrary SQL commands. This is supported by multiple sources within the connected documents, ...

CVE-2008-1859

SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

Unrestricted file upload

Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the "Manage Settings" functionality. NOTE: remote exploitation is facilitated by a separate SQL injection vulnerability...

CVE-2008-1790

Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the "Manage Settings" functionality. NOTE: remote exploitation is facilitated by a separate SQL injection vulnerability...

CVE-2008-1790

Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the "Manage Settings" functionality. NOTE: remote exploitation is facilitated by a separate SQL injection vulnerability...

CVE-2008-1790

This CVE affects iScripts SocialWare . It describes an unrestricted file upload vulnerability where remote authenticated administrators can upload arbitrary files through a crafted logo file in the Manage Settings function. The exploit is noted to be facilitated by a separate SQL injection vulner...

CVE-2008-1772

iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information...

Information disclosure

iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-1772

The CVE-2008-1772 entry concerns iScripts SocialWare, where passwords are stored in cleartext in the database. This creates an information disclosure risk because an attacker who can access the database could retrieve user credentials. The provided sources (NVD/NIST, CVE records) confirm the unde...

CVE-2008-1772

iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information...

iscripts-sql.txt

--==+================================================================================+==-- --==+ iScripts SocialWare SQL Injection Vulnerbility +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 8 April 2008 SITE...

iScripts SocialWare (id) Remote SQL Injection Vulnerbility

No description provided by source. --==+================================================================================+==-- --==+ iScripts SocialWare SQL Injection Vulnerbility +==-- --==+================================================================================+==-- Discovered By: t0pP8u...

iScripts SocialWare (id) Remote SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ========================================================== iScripts SocialWare id Remote SQL Injection Vulnerbility ==========================================================...

iScripts Socialware - 'id' SQL Injection

--==+================================================================================+==-- --==+ iScripts SocialWare SQL Injection Vulnerbility +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 8 April 2008 SITE...

Sql injection

SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL commands via the productid parameter...

CVE-2008-0911

SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL commands via the productid parameter...

CVE-2008-0911

CVE-2008-0911 affects iScripts MultiCart 2.0. The SQL injection vulnerability is in productdetails.php via the productid parameter, allowing remote authenticated users to execute arbitrary SQL commands. Documents provide CVSS base score 6.5 (MEDIUM) but do not include remediation steps. Exploit r...

CVE-2008-0911

SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execute arbitrary SQL commands via the productid parameter...

MultiCart 1.0 Remote Blind SQL Injection Exploit

No description provided by source. Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokas...