CVE-2009-4859

Multiple cross-site scripting XSS vulnerabilities in Online Work Order Suite OWOS Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 default.asp and 2 report.asp, and the 3 go parameter to login.asp...

EUVD-2005-3847

Malware in sbrugna...

Online Work Order Suite - Login SQL Injection

Online Work Order Suite - Login SQL Injection source: https://www.securityfocus.com/bid/44608/info Online Work Order Suite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Online Work Order Suite - Login SQL Injection

source: https://www.securityfocus.com/bid/44608/info Online Work Order Suite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

CVE-2009-4859

Multiple cross-site scripting XSS vulnerabilities in Online Work Order Suite OWOS Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 default.asp and 2 report.asp, and the 3 go parameter to login.asp...

CVE-2005-3852

SQL injection vulnerability in search.asp in Online Work Order Suite OWOS Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2005-3852

SQL injection vulnerability in search.asp in Online Work Order Suite OWOS Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2005-3852

The CVE-2005-3852 entry relates to OWOS Lite Edition for ASP 3.0. Affected component: search.asp; vulnerability: SQL injection via the keyword parameter. Impact: remote attackers could execute arbitrary SQL commands. No remediation details are provided in the supplied documents.

OWOS Lite 3.0 SQL inj.

Online Work Order Suite: Lite Edition for ASP 3.0 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/owos-lite-30-sql-inj.html Vendor:www.onlinetechtools.com Product link:http://www.onlinetechtools.com/products/owoslite/ affected vesion:3.0 a...