EUVD-2010-4160

Malware in sbrugna...

Sql injection

SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System OWOS Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4186

SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System OWOS Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4186

CVE-2010-4186 describes a SQL injection vulnerability in process.asp of OnlineTechTools Online Work Order System (OWOS) Professional Edition 2.10, allowing remote attackers to execute arbitrary SQL commands via the password parameter. The vulnerability originates in the handling of the password i...

CVE-2010-4186: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System OWOS Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information...

PT-2010-5344

Name of the Vulnerable Software and Affected Versions OnlineTechTools Online Work Order System OWOS Professional Edition version 2.10 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the password parameter in the "process.asp" file...

Onlinetechtools OWOS: Professional Edition SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Onlinetechtools OWOS: Professional Edition Authentication Bypass Vulnerability Version:2.10 Price:900$ Vendor url:http://www.onlinetechtools.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Soni...