CVE-2006-6805

CVE-2006-6805: SQL injection in Enthrallweb eJobs’ newsdetail.asp through the ID parameter. The vulnerability arises from unsafe handling of the ID value, enabling remote attackers to execute arbitrary SQL commands. Affected component is newsdetail.asp; root cause is improper input handling leadi...

CVE-2006-6806

The CVE-2006-6806 entry concerns Enthrallweb eMates 1.0, where a SQL injection vulnerability exists in newsdetail.asp. The underlying issue enables remote attackers to inject arbitrary SQL commands through the ID parameter, potentially affecting data confidentiality, integrity and availability as...

CVE-2006-6806: Undefined Security Weakness

SQL injection vulnerability in newsdetail.asp in Enthrallweb eMates 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-6805: Undefined Security Weakness

SQL injection vulnerability in newsdetail.asp in Enthrallweb eJobs allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Enthrallweb emates 1.0 - 'newsdetail.asp' SQL Injection

!/usr/bin/perl Script Name: Enthrallweb emates 1.0 newsdetail.asp Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 119.40 USD .. : ajann,Turkey use IO::Socket; if@ARGV newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || die...

Enthrallweb emates 1.0 (newsdetail.asp) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== Enthrallweb emates 1.0 newsdetail.asp Remote SQL Injection Exploit ==================================================================== !/usr/bin/perl Script Name:...