30 matches found
EUVD-2010-4883
Malware in sbrugna...
EUVD-2010-4331
Malware in sbrugna...
EUVD-2010-4884
Malware in sbrugna...
MicroNetSoft RV Dealer Website search.asp, showAlllistings.asp SQL Injection
No description provided by source. TITLE: MicroNetSoft RV Dealer Website Two SQL Injection Vulnerabilities PRODUCT: MicroNetSoft RV Dealer Website PRODUCT URL: http://www.micronetsoft.com/store/scripts/prodView.asp?idproduct=77 RESEARCHERS: underground-stockholm.com RESEARCHERS URL:...
Micronetsoft RV Dealer Website SQL Injection Vulnerability
No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Micronetsoft RV Dealer Website SQLi Vulnerability Vendor url:http://www.micronetsoft.com Version:1 Price:199$ Published: 2010-09-06 GThanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Son...
CVE-2010-4919
SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbitrary SQL commands via the vehicletypeID parameter...
CVE-2010-4920
SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the adID parameter...
Sql injection
SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the adID parameter...
Sql injection
SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbitrary SQL commands via the vehicletypeID parameter...
CVE-2010-4919
CVE-2010-4919 describes an SQL injection in detail.asp of Micronetsoft RV Dealer Website 1.0, exploitable remotely via the vehicletypeID parameter. Affected component: detail.asp; root cause: unsafely constructed SQL queries. Impact per NVD: partial confidentiality, integrity, and availability. A...
CVE-2010-4919
SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbitrary SQL commands via the vehicletypeID parameter...
CVE-2010-4920
SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the adID parameter...
CVE-2010-4920
CVE-2010-4920: SQL injection in Micronetsoft Rental Property Management Website 1.0 (detail.asp) via the ad_ID parameter allows remote attackers to execute arbitrary SQL commands. Root cause: unsanitized ad_ID input enabling injection. Impact (per CVSS2): partial confidentiality, integrity, and a...
PT-2011-1855
Name of the Vulnerable Software and Affected Versions Micronetsoft Rental Property Management Website version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ad ID parameter in the "detail.asp" endpoint. Recommendations For Micronetsof...
CVE-2010-4919: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbitrary SQL commands via the vehicletypeID parameter...
CVE-2010-4920: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the adID parameter...
PT-2011-1854
Name of the Vulnerable Software and Affected Versions Micronetsoft RV Dealer Website version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the vehicletypeID parameter in the "detail.asp" endpoint. Recommendations For Micronetsoft RV Deal...
CVE-2010-4362
Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the 1 selStock parameter to search.asp and the 2 orderBy parameter to showAlllistings.asp...
Sql injection
Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the 1 selStock parameter to search.asp and the 2 orderBy parameter to showAlllistings.asp...
CVE-2010-4362
Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the 1 selStock parameter to search.asp and the 2 orderBy parameter to showAlllistings.asp...