CVE-2005-3880

Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in users/comments.php, 2 categoryid and 3 id parameters in users/kb.php...

CVE-2005-3880

Omnistar KBase 4.0 and earlier contain SQL injection vulnerabilities in the web front end. Specifically, the parameters (1) article_id in users/comments.php, and (2) category_id and (3) id in users/kb.php allow remote attackers to modify the underlying SQL commands. This relates to the CVE-2005-3...

CVE-2005-3880: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in users/comments.php, 2 categoryid and 3 id parameters in users/kb.php...

Omnistar KBase SQL inj, vuln.

Omnistar KBase SQL inj, vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/omnistar-kbase-sql-inj-vuln.html Vendor:http://www.omnistarkbase.com/ affected version:4.0 and prior Product Description: Omnistar KBase is a dynamic knowledgebase...

CVE-2005-3840

SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 id and 2 categoryid parameter. NOTE: due to a typo, an Internet Explorer issue was incorrectly assigned this identifier, but the correct identifier is...

CVE-2005-3840

SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 id and 2 categoryid parameter. NOTE: due to a typo, an Internet Explorer issue was incorrectly assigned this identifier, but the correct identifier is...

CVE-2005-3840

CVE-2005-3840 describes a SQL injection vulnerability in Omnistar Live (kb.php) affecting version 5.2 and earlier. The issue arises from unsafely processing user-supplied input for the id and category_id parameters, enabling remote attackers to execute arbitrary SQL commands. The description note...

CVE-2005-3840: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 id and 2 categoryid parameter. NOTE: due to a typo, an Internet Explorer issue was incorrectly assigned this identifier, but the correct identifier is...

Omnistar Live "id" and "category_id" SQL inj.

Omnistar Live "id" and "categoryid" SQL inj. Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/omnistar-live-id-and-categoryid-sql.html Affected product version: Omnistar Live 5.2 and prior. http://www.omnistarlive.com Vuln. Description: Input passed ...