EUVD-2007-0564

Malware in sbrugna...

ASP NEWS <= 3.0 - (news_detail.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : ASP NEWS = V3 newsdetail.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.planetgraphic.de/ SQL--------------------------------------------------------- http://target/path//newsdetail.asp?id=SQL Example:...

CVE-2007-0566

SQL injection vulnerability in newsdetail.asp in ASP NEWS 3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

ASP News News_Detail.ASP SQL注入漏洞

ASP NEWS是一款基于ASP的WEB应用程序。 ASP NEWS不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'NewsDetail.ASP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 ASP NEWS 3 目前没有详细解决方案提供： http://www.planetgraphic.de/...

ASP NEWS &lt;= v3 (news_detail.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : ASP NEWS = V3 newsdetail.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.planetgraphic.de/ SQL--------------------------------------------------------- http://target/path//newsdetail.asp?id=SQL Example:...

ASP NEWS &lt;= V3 &#40;news_detail.asp&#41; Remote SQL Injection Vulnerability

Title : ASP NEWS = V3 newsdetail.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.planetgraphic.de/ SQL--------------------------------------------------------- http://target/path//newsdetail.asp?id=SQL Example:...

ASP NEWS 3.0 - 'news_detail.asp' SQL Injection

Title : ASP NEWS = V3 newsdetail.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.planetgraphic.de/ SQL--------------------------------------------------------- http://target/path//newsdetail.asp?id=SQL Example:...