EUVD-2008-0144

Malware in sbrugna...

BestWebApp Dating Site login_form.asp msg Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21158/info BestWebApp Dating Site is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker...

[Aria-Security.Net] BestWebApp Dating System SQL Injection

Aria-Security Team Persian Security Network http://Aria-Security.net ------------------------------- Shutouts: AurA, imm02tal Original Advisory and more info about this vulnerability: http://forum.aria-security.net/showthread.php?p=1442 Vendor: http://www.bestwebapp.com Google Search:...

CVE-2008-0130

SQL injection vulnerability in loginform.asp in Instant Softwares Dating Site allows remote attackers to execute arbitrary SQL commands via the Username parameter, a different vulnerability than CVE-2007-6671. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

CVE-2007-6671

CVE-2007-6671 is a SQL injection vulnerability in the login_form.asp of the Instant Softwares Dating Site. The flaw allows remote attackers to execute arbitrary SQL commands through the Password parameter (the description notes it is a different product than CVE-2006-6021). Other connected source...

CVE-2008-0130

The CVE-2008-0130 entry documents a SQL injection vulnerability in Instant Softwares Dating Site, specifically in login_form.asp. The issue allows remote attackers to execute arbitrary SQL commands via the Username parameter (per the CVE description), and is identified alongside related entries s...

CVE-2008-0131

CVE-2008-0131 describes a Cross-site scripting (XSS) vulnerability in login_form.asp of Instant Softwares Dating Site, exploitable by remote attackers via the msg parameter. The description notes the vulnerability is in a different product than CVE-2006-6022 and that provenance is unknown with de...

CVE-2006-6022

The CVE-2006-6022 entry documents a Cross-site Scripting (XSS) flaw in BestWebApp Dating Site, specifically in login_form.asp where an attacker can inject arbitrary script via the msg parameter. The vulnerability’s described impact is partial confidentiality/integrity/availability, with network a...