10 matches found
EUVD-2006-5875
Malware in sbrugna...
AspPired2Poll <= 1.0 (MoreInfo.asp) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: AspPired2 Poll = 1.0 MoreInfo.asp Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : use IO::Socket; if@ARGV 3 print ======================================================================== // AspPired2 Poll = 1....
CVE-2006-5892
SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-5892
The CVE-2006-5892 issue affects The Net Guys ASPired2Poll 1.0 and earlier, where SQL injection occurs in MoreInfo.asp via the id parameter. The root cause is unsafeguarded SQL construction in the page, enabling remote attackers to inject arbitrary SQL commands. Per NVD, the impact is partial conf...
CVE-2006-5892
SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
AspPired2Poll 1.0 - 'MoreInfo.asp' SQL Injection
!/usr/bin/perl Script Name: AspPired2 Poll newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || die "\n+ Connection failed...\n"; print $socket "GET $target\n"; print $socket "Host: $server\n"; print $socket "Accept: /\n"; print $socket "Connection: close\n\n"; print "+ Conn...
AspPired2Poll 1.0 - MoreInfo.asp SQL Injection
AspPired2Poll 1.0 - MoreInfo.asp SQL Injection !/usr/bin/perl Script Name: AspPired2 Poll newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || die "\n+ Connection failed...\n"; print $socket "GET $target\n"; print $socket "Host: $server\n"; print $socket "Accept: /\n"; print $socket...
Cross site scripting
Cross-site scripting XSS vulnerability in moreinfo.asp in EPublisherPro allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2306
CVE-2006-2306 is described as a cross-site scripting (XSS) vulnerability in moreinfo.asp of EPublisherPro, allowing remote attackers to inject arbitrary scripts or HTML via the title parameter. The NVD entry lists a high impact (CVSSv2: AV:N/AC:M/Au:N/C:C/I:C/A:C, base score 9.3) affecting the af...
EPublisherPro 0.9.7 - Moreinfo.asp Cross-Site Scripting
EPublisherPro 0.9.7 - Moreinfo.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/17907/info EPublisherPro is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...