CVE-2008-2634

CVE-2008-2634 affects I-Pos Internet Pay Online Store 1.3 Beta and earlier. The vulnerability is a SQL injection in index.asp, exploitable via the item parameter, allowing remote attackers to execute arbitrary SQL commands as described in the CVE record. Documented impact includes standard SQLi c...

CVE-2008-2634

SQL injection vulnerability in index.asp in I-Pos Internet Pay Online Store 1.3 Beta and earlier allows remote attackers to execute arbitrary SQL commands via the item parameter...

I-Pos Internet Pay Online Store <= 1.3 Beta SQL Injection Vulnerability

No description provided by source. + Title : I-Pos Internet Pay Online Store v1.3 Beta = Remote SQL Injection Vulnerability ========================================================================================== + Author : KnocKout + Special ThanX : Dr.Kacak & Cr@zy-King and CW ALL USERS . . ....

ipos-sql.txt

Title : I-Pos Internet Pay Online Store v1.3 Beta = Remote SQL Injection Vulnerability ========================================================================================== + Author : KnocKout + Special ThanX : Dr.Kacak & Cr@zy-King and CW ALL USERS . . . + Cyber-Warrior.Org...

I-Pos Internet Pay Online Store 1.3 Beta - SQL Injection

I-Pos Internet Pay Online Store 1.3 Beta - SQL Injection + Title : I-Pos Internet Pay Online Store v1.3 Beta = Remote SQL Injection Vulnerability ========================================================================================== + Author : KnocKout + Special ThanX : Dr.Kacak & Cr@zy-King...

I-Pos Internet Pay Online Store <= 1.3 Beta SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= I-Pos Internet Pay Online Store = 1.3 Beta SQL Injection Vulnerability ======================================================================= + Title : I-Pos Internet...

I-Pos Internet Pay Online Store 1.3 Beta - SQL Injection

Title : I-Pos Internet Pay Online Store v1.3 Beta = Remote SQL Injection Vulnerability ========================================================================================== + Author : KnocKout + Special ThanX : Dr.Kacak & Cr@zy-King and CW ALL USERS . . . + Cyber-Warrior.Org...

CVE-2008-0440

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts...

CVE-2008-0440

The affected software is AlstraSoft Forum Pay Per Post Exchange 2.0. The CVE entry describes the root cause as storing passwords in cleartext, enabling attackers to access user accounts. The connected documents confirm this issue, but do not provide a remediation or patch version. Exploitation st...

CVE-2008-0440

AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access user accounts...

Sql injection

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forumcatview action...

CVE-2008-0429

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter in a forumcatview action...

CVE-2008-0429

CVE-2008-0429 describes an SQL injection in the PHP file index.php for AlstraSoft Forum Pay Per Post Exchange 2.0. The vulnerability is exploitable via the catid parameter in the forum_catview action, potentially allowing remote attackers to execute arbitrary SQL commands and compromise data. The...

Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection

Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection --==+================================================================================+==-- --==+ Forum Pay Per Post SQL Injection Vulnerbilitys +==-- --==+================================================================================+==...

CVE-2007-6501

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp...

CVE-2007-6501

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp...

Cross site request forgery (csrf)

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp...

CVE-2007-6501

The CVE affects Hosting Controller 6.1 Hotfix 3.3 and earlier. It describes an unspecified vulnerability that allows remote authenticated users to enable or disable the "pay type" via a request to adminsettings/choosetranstype.asp. The connected documents provide this basic impact but do not spec...

Sql injection

SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface allows remote attackers to execute arbitrary SQL commands via the Password parameter...

CVE-2007-4106

SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface allows remote attackers to execute arbitrary SQL commands via the Password parameter...