CVE-2008-6378

SQL injection vulnerability in calendarEventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Sql injection

SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6379

SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6379

CVE-2008-6379 is a SQL injection vulnerability in Gallery MX 2.0.0, affecting the pics_pre.asp endpoint and allowing remote attackers to execute arbitrary SQL commands via the ID parameter. The issue is documented in multiple sources (NVD, CVE lists) with a CVSS v2 base score of 7.5 (High) and ne...

CVE-2008-6378

This CVE (CVE-2008-6378) affects Calendar Mx Professional 2.0.0 and arises from a SQL injection in calendar_Eventupdate.asp where the ID parameter is not properly sanitized. Remote attackers can execute arbitrary SQL commands via that parameter. The vulnerability is rated CVSSv2 base score 7.5 (H...

CVE-2008-6379

SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6379: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6378: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in calendarEventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

calendarmx-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:calendarEventupdate.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net Software: Calendar Mx Professional author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

gallerymx-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:picspre.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net/ Software: Gallery MX author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Gallery MX 2.0.0 - Blind SQL Injection

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:picspre.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net/ Software: Gallery MX author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Gallery MX 2.0.0 (pics_pre.asp ID) Blind SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:picspre.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net/ Software: Gallery MX author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...

Gallery MX 2.0.0 - Blind SQL Injection

Gallery MX 2.0.0 - Blind SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:picspre.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net/ Software: Gallery MX author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...

Gallery MX 2.0.0 (pics_pre.asp ID) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Gallery MX 2.0.0 picspre.asp ID Blind SQL Injection Vulnerability ==================================================================== Tybe:picspre.asp ID Blind SQL...

Calendar MX Professional 2.0.0 - Blind SQL Injection

Calendar MX Professional 2.0.0 - Blind SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:calendarEventupdate.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net Software: Calendar Mx Professional author: я3d D3v!L...

Calendar MX Professional 2.0.0 Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Calendar MX Professional 2.0.0 Blind SQL Injection Vulnerability ================================================================ Tybe:calendarEventupdate.asp ID Blind SQL...

Calendar MX Professional 2.0.0 - Blind SQL Injection

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:calendarEventupdate.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net Software: Calendar Mx Professional author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

CVE-2008-4831: Undefined Security Weakness

Unspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 and ColdFusion MX 7.0.2 allows local users to bypass sandbox restrictions, and obtain sensitive information or possibly gain privileges, via unknown vectors...

CVE-2008-4473: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters...

CVE-2008-2477

CVE-2008-2477 describes a SQL injection vulnerability in the MX-System/MxBB Portal 2.7.3, specifically in index.php where the vulnerable input is the page parameter. The underlying issue is improper handling of user-supplied input in constructing SQL queries, enabling remote attackers to execute ...