EUVD-2006-6130

Malware in sbrugna...

EUVD-2006-6131

Malware in sbrugna...

EUVD-2006-6132

Malware in sbrugna...

JiRos Link Manager 1.0 openlink.asp LinkID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21226/info JiRos Links Manager is prone to multiple input-validation vulnerabilities, including SQL- and HTML-injection issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could...

JiRos Link Manager 1.0 viewlinks.asp CategoryID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21226/info JiRos Links Manager is prone to multiple input-validation vulnerabilities, including SQL- and HTML-injection issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could...

JiRos (Multiple Products) - fileslogin.asp Multiple SQL Injections

JiRos Multiple Products - fileslogin.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/37045/info Multiple JiRo's products are prone to multiple SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL query...

JiRos FAQ Manager eXperience 1.0 - fID SQL Injection

JiRos FAQ Manager eXperience 1.0 - fID SQL Injection + Script Name : JiRo´s FAQ Manager eXperience + Version : v 1.0 + Price : Single Website License 34.95 $ 2 Websites License 62.95 $ 5 Websites License 139.95 $ + Author : Underz0ne Crew + Home : http://www.underz0ne.net + Script In short :...

JiRos Upload Manager SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://www.jiros.ne Google Search: JBS v2.0, Powered by JiRoґs.Net Path: files/login.asp Username: anything' OR 'x'='x Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To...

JiRos Banner System 2.0 - login.asp Multiple SQL Injections

JiRos Banner System 2.0 - login.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/26479/info JiRo's Banner System is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these...

CVE-2006-6149

SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the tID parameter...

CVE-2006-6147

Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the 1 LinkID parameter to openlink.asp or the 2 CategoryID parameter to viewlinks.asp...

CVE-2006-6149

SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the tID parameter...

CVE-2006-6147

Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the 1 LinkID parameter to openlink.asp or the 2 CategoryID parameter to viewlinks.asp...

CVE-2006-6148

Multiple cross-site scripting XSS vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to inject arbitrary web script or HTML via the 1 lName, 2 lURL, 3 lImage, and 4 lDescription parameters. NOTE: some of these details are obtained from third party information...

CVE-2006-6149

CVE-2006-6149 affects JiRos FAQ Manager 1.0, where the vulnerability resides in the web-facing code: SQL injection via the tID parameter in index.asp. The underlying issue is improper input handling in the application that allows constructing and executing arbitrary SQL commands on the backend da...

CVE-2006-6147

CVE-2006-6147 concerns multiple SQL injection flaws in JiRos Links Manager. The affected components are the web interfaces openlink.asp (LinkID parameter) and viewlinks.asp (CategoryID parameter), where unsafely concatenated input allows remote attackers to execute arbitrary SQL commands. The NVD...

CVE-2006-6148

CVE-2006-6148 involves multiple reflected cross-site scripting (XSS) vulnerabilities in the submitlink.asp component of JiRos Links Manager. The flaws allow remote attackers to inject arbitrary web script or HTML via the affected parameters lName, lURL, lImage, and lDescription, enabling potentia...

CVE-2006-6149: Undefined Security Weakness

SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the tID parameter...

CVE-2006-6147: Undefined Security Weakness

Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the 1 LinkID parameter to openlink.asp or the 2 CategoryID parameter to viewlinks.asp...

CVE-2006-6148: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to inject arbitrary web script or HTML via the 1 lName, 2 lURL, 3 lImage, and 4 lDescription parameters. NOTE: some of these details are obtained from third party information...