17 matches found
EUVD-2006-5990
Malware in sbrugna...
Online Event Registration <= 2.0 (save_profile.asp) Pass Change Exploit
No description provided by source. !-- Title : Online Event Registration = v2.0 saveprofile.asp Remote User Pass Change Exploit Author : ajann Code -- html body bgcolor=000000 form method=POST action=saveprofile.asp?key=1®key= User Nameinput type=hidden name=UserID size=4 input type=text...
Sql injection
Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the 1 Email Address and 2 Password fields in a login.asp and b adminlogin.asp...
CVE-2007-5704
Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the 1 Email Address and 2 Password fields in a login.asp and b adminlogin.asp...
CVE-2007-5704
CVE-2007-5704 concerns the CodeWidgets.com Online Event Registration Template, where the (1) Email Address and (2) Password fields in login.asp and admin_login.asp are vulnerable to SQL injection. The underlying issue permits remote attackers to craft input that may result in arbitrary SQL execut...
CVE-2007-5704: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the 1 Email Address and 2 Password fields in a login.asp and b adminlogin.asp...
CodeWidget Online Event Registration Template SQL注入漏洞
CodeWidget Online Event Registration Template是一款基于ASP的WEB应用程序。 CodeWidget Online Event Registration Template不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于脚本对用户提交的EMAIL地址参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 CodeWidgets Online Event Registration Template 目前没有详细解决方案提供：...
codewidget-sql.txt
http://Aria-Security.Net ------------------------------------- CodeWidgets.Com Online Event Registration Poc Normal User account: login.asp Email address: ' UNION SELECT FROM users password: Aria-Security.Net Admin Panel: adminlogin.asp Email address: ' UNION SELECT FROM admin Password:...
Sql injection
SQL injection vulnerability in signin.aspx in WebEvents Online Event Registration Template allows remote attackers to execute arbitrary SQL commands via the Password parameter...
CVE-2007-4108
CVE-2007-4108 : Concrete details across multiple connected documents show a SQL injection vulnerability in the WebEvents (Online Event Registration Template) application, specifically in the sign_in.aspx component. The vulnerability allows an attacker to manipulate the Password parameter to execu...
CVE-2006-6007
saveprofile.asp in WebEvents Online Event Registration Template 2.0 and earlier allows remote attackers to change the profiles, passwords, and other information for arbitrary users via a modified UserID parameter...
CVE-2006-6007
The CVE-2006-6007 issue affects WebEvents (Online Event Registration Template) 2.0 and earlier, specifically save_profile.asp. The underlying flaw allows remote attackers to change profiles, passwords, and other information for arbitrary users by altering the UserID parameter. This describes a us...
Online Event Registration <= 2.0 (save_profile.asp) Pass Change Exploit
No description provided by source. !-- Title : Online Event Registration = v2.0 saveprofile.asp Remote User Pass Change Exploit Author : ajann Code -- html body bgcolor="000000" form method="POST" action="saveprofile.asp?key=1®key=" User Nameinput type="hidden" name="UserID" size="4" input...
onlineer-20.txt
User Name Email Phone Fax Password = ID Next Click "Profile" ajann,Turkey ... Im Not Hacker! --...
Online Event Registration <= 2.0 (save_profile.asp) Pass Change Exploit
Exploit for unknown platform in category web applications ======================================================================= Online Event Registration User Name Email Phone Fax Password = ID Next Click "Profile" ajann,Turkey ... Im Not Hacker! -- 0day.today 2018-03-09...
Online Event Registration 2.0 - save_profile.asp Pass Change
Online Event Registration 2.0 - saveprofile.asp Pass Change User Name Email Phone Fax Password = ID Next Click "Profile" ajann,Turkey ... Im Not Hacker! -- milw0rm.com 2006-11-13...
