CVE-2008-5934

SQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute arbitrary SQL commands via the idsezione parameter...

CVE-2008-5933

The CVE-2008-5933 entry documents multiple cross-site scripting (XSS) flaws in CMS ISWEB 3.0, specifically in index.php where the strcerca and id_oggetto parameters can be used to inject arbitrary web script or HTML. The vulnerability arises from unsafely handling these inputs, enabling an attack...

CVE-2008-5934

CVE-2008-5934 describes a SQL injection vulnerability in the CMS ISWEB 3.0, specifically in the file index.php, where the parameter id_sezione can be manipulated to cause arbitrary SQL commands to be executed by an attacker. The vulnerability is exploitable remotely and can affect the confidentia...

CVE-2008-5933: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in CMS ISWEB 3.0 allow remote attackers to inject arbitrary web script or HTML via 1 the strcerca parameter aka the input field for the cerca action or 2 the idoggetto parameter. NOTE: some of these details are obtained from third par...

CVE-2008-5934: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute arbitrary SQL commands via the idsezione parameter...

IsWeb CMS 3.0 SQL Injection / XSS

■ IsWeb CMS v 3.0 $qL/XsS Multiple vulnerabilities --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection SIte vuln: http://www.cmsisweb.it --------------------------------------- DeM0: |:...

IsWeb CMS 3.0 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. ■ IsWeb CMS v 3.0 $qL/XsS Multiple vulnerabilities --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection SIte vuln: http://www.cmsisweb.it --------------------------------------- ■ Bli...

isweb CMS 3.0 - SQL Injection Cross-Site Scripting

isweb CMS 3.0 - SQL Injection Cross-Site Scripting ■IsWeb CMS v 3.0 $qL/XsS Multiple vulnerabilities --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection SIte vuln: http://www.cmsisweb.it...

IsWeb CMS 3.0 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= IsWeb CMS 3.0 SQL/XSS Multiple Remote Vulnerabilities ======================================================= ¦ IsWeb CMS v 3.0 $qL/XsS Multiple vulnerabilities...

isweb CMS 3.0 - SQL Injection / Cross-Site Scripting

■IsWeb CMS v 3.0 $qL/XsS Multiple vulnerabilities --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection SIte vuln: http://www.cmsisweb.it --------------------------------------- DeM0: |:...