EUVD-2006-2504

Malware in sbrugna...

oneworld.at XSS vulnerability

Open Bug Bounty ID: OBB-579464 Description| Value ---|--- Affected Website:| oneworld.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jvwebservices.com XSS vulnerability

Vulnerable URL: http://www.jvwebservices.com/donvogl/list.asp?medium=1"...

godaven.com XSS vulnerability

Vulnerable URL: http://www.godaven.com/list.asp?City=1/-///'/"//--...

Ananda Real Estate 3.4 (list.asp) Multiple SQL Injection

No description provided by source. TITLE: Ananda Real Estate list.asp Multiple SQL Injection Vulnerabilities PRODUCT: Ananda Real Estate 3.4 PRODUCT URL: http://www.softwebsnepal.com/websitedesignrealestate.htm RESEARCHERS: underground-stockholm.com RESEARCHERS URL:...

CVE-2011-3684: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Tembria Server Monitor before 6.0.5 Build 2252 allow remote attackers to inject arbitrary web script or HTML via 1 the siteid parameter to logbook.asp, 2 the siteid parameter to monitor-events.asp, 3 the siteid parameter to...

Sql injection

Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal aka Ananda Raj Pandey Ananda Real Estate 3.4 allow remote attackers to execute arbitrary SQL commands via the 1 city, 2 state, 3 country, 4 minprice, 5 maxprice, 6 bed, and 7 bath parameters, different vectors than CVE-2006-6807...

CVE-2010-4782: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal aka Ananda Raj Pandey Ananda Real Estate 3.4 allow remote attackers to execute arbitrary SQL commands via the 1 city, 2 state, 3 country, 4 minprice, 5 maxprice, 6 bed, and 7 bath parameters, different vectors than CVE-2006-6807...

Ananda Real Estate 3.4 (list.asp) Multiple SQL Injection

Exploit for asp platform in category web applications ======================================================== Ananda Real Estate 3.4 list.asp Multiple SQL Injection ======================================================== TITLE: Ananda Real Estate "list.asp" Multiple SQL Injection Vulnerabilitie...

Ananda Real Estate 3.4 - 'list.asp' Multiple SQL Injections

TITLE: Ananda Real Estate "list.asp" Multiple SQL Injection Vulnerabilities PRODUCT: Ananda Real Estate 3.4 PRODUCT URL: http://www.softwebsnepal.com/websitedesignrealestate.htm RESEARCHERS: underground-stockholm.com RESEARCHERS URL: http://underground-stockholm.com/ BUGS:...

Ananda Real Estate 3.4 SQL Injection

TITLE: Ananda Real Estate "list.asp" Multiple SQL Injection Vulnerabilities PRODUCT: Ananda Real Estate 3.4 PRODUCT URL: http://www.softwebsnepal.com/websitedesignrealestate.htm RESEARCHERS: underground-stockholm.com RESEARCHERS URL: http://underground-stockholm.com/ BUGS:...

Ananda Real Estate 3.4 - list.asp Multiple SQL Injections

Ananda Real Estate 3.4 - list.asp Multiple SQL Injections TITLE: Ananda Real Estate "list.asp" Multiple SQL Injection Vulnerabilities PRODUCT: Ananda Real Estate 3.4 PRODUCT URL: http://www.softwebsnepal.com/websitedesignrealestate.htm RESEARCHERS: underground-stockholm.com RESEARCHERS URL:...

Ananda Real Estate list.asp SQL远程注入漏洞

Ananda Real Estate是用于创建房地产站点的软件。 Ananda Real Estate在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞非授权访问数据库，导致敏感信息泄露或数据库破坏。 Ananda Real Estate的list.asp脚本没有正确过滤agent参数的输入，允许攻击者通过在输入数据中插入特定的SQL语句恶意操作数据库。 Softwebs Nepal Ananda Real Estate 3.4 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2006-6815: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified parameters to 1 setpreferences.asp, 2 sendpasswordpreferences.asp, and 3 SecureLoginManager/list.asp in the...

CVE-2006-6807: Undefined Security Weakness

SQL injection vulnerability in list.asp in Softwebs Nepal aka Ananda Raj Pandey Ananda Real Estate 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the agent parameter...

Ananda Real Estate <= 3.4 (agent) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability ==================================================================== Title : Ananda Real Estate = 3.4...

CVE-2006-2504: Undefined Security Weakness

Multiple SQL injection vulnerabilities in mono AZBOARD 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 search and 2 cate parameters to a list.asp, and the 3 id and cate parameters to b adminok.asp...