MySource Matrix - 'char_map.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43020/info MySource Matrix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

MySource Matrix - char_map.php Multiple Cross-Site Scripting Vulnerabilities

MySource Matrix - charmap.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/43020/info MySource Matrix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issu...

AJ Matrix 3.1 SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- AJ Matrix...

AJ Matrix 3.1 - id Multiple SQL Injections

AJ Matrix 3.1 - id Multiple SQL Injections / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

AJ Matrix 3.1 - 'id' Multiple SQL Injections

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- AJ Matrix...

Cisco Defines Cybercrime ROI

The Cisco Cybercrime Return on Investment Matrix identifies the innovative and lucrative banking Trojan Zeus, as well as successful Web exploits that have dominated cybercrime as “rising stars.” Read the full article. TechTarget...

CVE-2009-2779

SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via the id parameter in a productdetail action...

Sql injection

SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via the id parameter in a productdetail action...

CVE-2009-2779

SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via the id parameter in a productdetail action...

CVE-2009-2779

CVE-2009-2779 affects AJ Matrix DNA, specifically the web entry point in index.php . The vulnerability arises in the productdetail action where an attacker can supply a crafted id parameter to trigger an SQL injection, enabling remote execution of arbitrary SQL commands. The issue is confirmed ac...

CVE-2009-2779: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via the id parameter in a productdetail action...

AJ Matrix DNA SQL Injection

/ AJ Matrix DNA index.php id Remote SQL Injection Discovered by : MizoZ Contact : [email protected] Team : EvilWay Date : July 29 2009 Greetings : Moudi , Zuka, All friends / SQL Injection index.php GET : id : HOST/PATH/index.php?do=productdetail&id=SQL CODE SQL CODE :...

PrecisionID Data Matrix Barcode ActiveX控件任意文件覆盖漏洞

BUGTRAQ ID: 34322 CVECAN ID: CVE-2009-1212 PrecisionID Data Matrix是用于生成二维条码的工具。 PrecisionID所提供的DMATRIXLib.Datamatrix ActiveX控件没有正确地验证用户对SaveBarCode和SaveEnhWMF方式所提交的输入参数： Sub SaveBarCode ByVal path As String Sub SaveEnhWMF ByVal path As String 如果用户受骗访问了恶意网页并向上述方式传送了恶意参数的话，就可能导致向系统上任意位置写入文件。...

Virgilio Toolbar Toolbar ActiveX Control Remote Denial of Service Exploit

!-- // Virgilio Toolbar Toolbar ActiveX Control Remote Denial of Service Exploit // Version == 1.3.0.0 // Internet Explorer ver 6.0 , 7.0 // Tested on Windows SP2 Bug discovered by cN4phux. Greet'z ^to : Blub , Knuthy , Djug , Xacker , DATASNIPER , His0k4 , Heurs etc . . . And all Algerians...

CVE-2008-5634

SQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...

CVE-2008-5634

SQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...

CVE-2008-5634

CVE-2008-5634 describes an SQL injection vulnerability in Active Force Matrix 2.0, specifically in account.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands through the username and password parameters (potentially related to start.asp). The CVSS 2.0 base score is 7...

CVE-2008-5634: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...

Active Force Matrix 2 - Authentication Bypass

Active Force Matrix 2 - Authentication Bypass ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Force Matrix v 2 author: я3d D3v!L Date:...