CVE-2012-6510: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 PWRS or 2 Description field when posting a new vehicle; 3 news title when creating news; 4 Name when creating a sub user; 5 group name when...

PT-2013-1974

Name of the Vulnerable Software and Affected Versions NetArt Media Car Portal version 3.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via several fields, including the PWRS field, Description field when posting a new vehicle, news title when creating news,...

PT-2013-1972

Name of the Vulnerable Software and Affected Versions NetArt Media Car Portal version 3.0 Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This can be achieved through multiple cross-site request forgery CSRF vulnerabilities...

CVE-2012-6509: Undefined Security Weakness

Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated by .php%00.jpg...

NetArt Media iBoutique 'key' Parameter SQL Injection Vulnerability

NetArt Media iBoutique is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NetArt Media Pharmacy System 2.0 XSS / SQL Injection

Title : NetArt Media Pharmacy System SQL Injection and Cross-site Scripting Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.netartmedia.net/ Advisory : http://secpod.org/blog/?p=513 :...

NetArt Media iBoutique 4.0 SQL Injection

Title : NetArt Media iBoutique SQL Injection Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.netartmedia.net/ Advisory : http://secpod.org/blog/?p=510 : http://secpod.org/advisories/SecPodNetArtMediaiBoutiqueSQLiVuln.txt Software : NetArt Media iBoutique...

iBoutique 4.0 - key SQL Injection

iBoutique 4.0 - key SQL Injection Title : NetArt Media iBoutique SQL Injection Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.netartmedia.net/ Advisory : http://secpod.org/blog/?p=510 : http://secpod.org/advisories/SecPodNetArtMediaiBoutiqueSQLiVuln.txt...

iBoutique 4.0 - 'key' SQL Injection

Title : NetArt Media iBoutique SQL Injection Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.netartmedia.net/ Advisory : http://secpod.org/blog/?p=510 : http://secpod.org/advisories/SecPodNetArtMediaiBoutiqueSQLiVuln.txt Software : NetArt Media iBoutique...

NetArt Media iBoutique 4.0 (index.php key parameter) SQL Injection Vulnerability

Exploit for php platform in category web applications Overview: --------- NetArt Media iBoutique SQL Injection Vulnerability. Technical Description: ---------------------- An SQL Injection Vulnerability is present in NetArt Media iBoutique as it fails to sanitise user-supplied input. Input passed...

NetArt Media Jobs Portal - SQL Injection

source: https://www.securityfocus.com/bid/54026/info NetArt Media Jobs Portal is prone to multiple HTML-injection vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to compromise the...

NetArt Media iBoutique 'page' SQL Injection and XSS Vulnerabilities

NetArt Media iBoutique is prone to multiple SQL injection and cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2010-5020

SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-5020

SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-5020

CVE-2010-5020 affects NetArt Media iBoutique 4.0. The vulnerability is a SQL injection in index.php via the page parameter, allowing remote attackers to potentially execute arbitrary SQL commands. Connected sources consistently describe this flavor of vulnerability for NetArt Media iBoutique 4.0 ...

CVE-2010-5020

SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-5020: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

PT-2011-1955

Name of the Vulnerable Software and Affected Versions NetArt Media iBoutique version 4.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the page parameter in the index.php file. Recommendations For NetArt Media iBoutique version 4.0...

NetArt Media Car Portal SQLi Vulnerability

NetArt Media Car Portal is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...