30 matches found
EUVD-2005-4054
Malware in sbrugna...
EUVD-2006-2855
Malware in sbrugna...
EUVD-2007-0133
Malware in sbrugna...
EUVD-2005-4200
Malware in sbrugna...
LocazoList Classifieds 1.0 SearchDB.ASP Input Validation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15812/info LocazoList Classifieds is prone to an input validation vulnerability that allows cross-site scripting and SQL injection attacks. An attacker may leverage this issue to have arbitrary script code executed in the...
LocazoList <= 2.01a beta5 (subcatID) Remote SQL Injection Vulnerability
No description provided by source...
LocazoList Classifieds 1.0 Viewmsg.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18254/info LocazoList Classifieds is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploi...
Sql injection
SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatID parameter...
CVE-2007-0129
SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatID parameter...
CVE-2007-0129
CVE-2007-0129 describes an SQL injection in LocazoList (main.asp) affecting version 2.01a beta5 and earlier. The vulnerability is triggered via the subcatID parameter, enabling remote attackers to execute arbitrary SQL commands. Exploitation is network‑based with low complexity and no authenticat...
CVE-2007-0129
SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatID parameter...
LocazoList <= 2.01a beta5 (subcatID) Remote SQL Injection Vulnerability
No description provided by source. Title : LocazoList = v2.01a beta5 subcatID Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.locazo.net:81 Dork : "Powered by Locazolist Copyright ? 2006" $$ : $100 SQL---------------------------------------------------------...
LocazoList 2.01a beta5 - 'subcatID' SQL Injection
Title : LocazoList = v2.01a beta5 subcatID Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.locazo.net:81 Dork : "Powered by Locazolist Copyright © 2006" $$ : $100 SQL---------------------------------------------------------...
LocazoList 2.01a beta5 - subcatID SQL Injection
LocazoList 2.01a beta5 - subcatID SQL Injection Title : LocazoList = v2.01a beta5 subcatID Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.locazo.net:81 Dork : "Powered by Locazolist Copyright © 2006" $$ : $100...
LocazoList <= 2.01a beta5 (subcatID) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================= LocazoList = 2.01a beta5 subcatID Remote SQL Injection Vulnerability ======================================================================= Title : LocazoList = v2.01...
CVE-2006-2858
SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter...
Sql injection
SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter...
CVE-2006-2858
The vulnerability CVE-2006-2858 affects LocazoList Classifieds 1.05e, with the issue located in viewmsg.asp. The underlying flaw is an SQL injection via the msgid parameter that allows remote attackers to execute arbitrary SQL commands. The available sources confirm the presence of this SQL injec...
CVE-2006-2858
SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter...
locazolist.txt
Title : LocazoList Classifieds = v1.05eviewmsg.asp Remote SQL Injection Vulnerability Author : ajann Vulnerability; $$$ http://target/path/viewmsg.asp?msgid= SQL TEXT $$$ Example:...