61 matches found
EUVD-2014-2356
Malware in sbrugna...
EUVD-2010-4930
Malware in sbrugna...
EUVD-2011-3304
Malware in sbrugna...
EUVD-2009-5058
Malware in sbrugna...
EUVD-2009-5057
Malware in sbrugna...
EUVD-2010-4931
Malware in sbrugna...
CVE-2010-4966
Cross-site scripting XSS vulnerability in default.asp in ATCOM Netvolution allows remote attackers to inject arbitrary web script or HTML via the query parameter in a Search action...
CVE-2009-5103
Cross-site scripting XSS vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the email variable...
CVE-2009-5102
SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL commands via the bpenid parameter...
netvolution cms 1.0 (xss/sql) Multiple Vulnerabilities
No description provided by source. Found By : Ellinas aka Greek Email: [email protected] Vulnerable Product: CMS netvolution v1.0 website : www.netvolution.net , www.atcom.gr SQL Injection Version Finding:...
CVE-2014-2318
SQL injection vulnerability in ATCOM Netvolution 3 allows remote attackers to execute arbitrary SQL commands via the m parameter...
Sql injection
SQL injection vulnerability in ATCOM Netvolution 3 allows remote attackers to execute arbitrary SQL commands via the m parameter...
CVE-2014-2318
SQL injection vulnerability in ATCOM Netvolution 3 allows remote attackers to execute arbitrary SQL commands via the m parameter...
CVE-2014-2318
The provided connections confirm CVE-2014-2318 is an SQL injection vulnerability in ATCOM Netvolution 3, exploitable via the m parameter to allow remote arbitrary SQL execution. Affected component is ATCOM Netvolution 3; root cause is improper input handling leading to SQL command injection. Impa...
CVE-2014-2318: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in ATCOM Netvolution 3 allows remote attackers to execute arbitrary SQL commands via the m parameter...
PT-2014-4621
Name of the Vulnerable Software and Affected Versions ATCOM Netvolution version 3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the m parameter. Recommendations For ATCOM Netvolution version 3, avoid using the m parameter in affected API...
Netvolution 'm'参数SQL注入漏洞
Bugtraq ID:65942 Netvolution是一款基于WEB内容管理软件。 Netvolution不正确过滤用户提交的'm'参数数据，允许远程攻击者利用漏洞提交特制的请求，可操作或获取数据库数据。 0 Netvolution 3.0 目前没有详细解决方案提供： http://www.netvolution.net sqlmap output: Place: Get Parameter: m Type: error-based Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause...
Netvolution WCM CMS 3 SQL Injection
Exploit Title: Netvolution WCM - CMS v3 SQL Injection Exploit Type: Error-based SQL injection Date: Sun 02 Mar 2014 Exploit Author: projectzero labs Projectzero ID: projectzero2014-002-netvolutionsqli Vendor Homepage: http://www.netvolution.net && http://www.atcom.gr Version: 3 as vendor comfirme...