CVE-2007-4106

SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface allows remote attackers to execute arbitrary SQL commands via the Password parameter...

CVE-2007-4106

The CVE concerns SQL injection in the login.asp of CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface. The vulnerability allows remote attackers to execute arbitrary SQL commands via the Password parameter, implying an injection flaw in authentication logic. Connected...

payroll-sql.txt

A R I A - S E C U R I T Y Pay Roll - Time Sheet and Punch Card Application With Web Interface SQL Injection Vendor: http://www.codewidgets.com http://target.com/PATH/login.asp Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...

Pay Roll Time Sheet and Punch Card Application With Web UI - login.asp SQL Injection

Pay Roll Time Sheet and Punch Card Application With Web UI - login.asp SQL Injection source: https://www.securityfocus.com/bid/25114/info Pay Roll - Time Sheet and Punch Card Application With Web Interface is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize...

CVE-2006-6392

Directory traversal vulnerability in index.php in plx Web Studio aka plxWebDev plx Pay 3.2 and earlier allows remote attackers to include and execute arbitrary local files, or obtain user credentials and other sensitive information, via a .. dot dot in the read parameter. NOTE: The provenance of...

CVE-2006-4358

CVE-2006-4358 describes a cross-site scripting (XSS) vulnerability in the Diesel Pay product, affecting the code path index.php via the read parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. According to the NVD entry, the CVSS v2 base score is 4.3 (Medi...

CVE-2006-4358

Cross-site scripting XSS vulnerability in index.php in Diesel Pay allows remote attackers to inject arbitrary web script or HTML via the read parameter...

CVE-2006-1050

Kwik-Pay Payroll 4.2.20, and possibly other versions, stores the KwikPay.mdb database file with insecure permissions, which allows local users to obtain sensitive information such as employment and payment data. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2006-1050

Kwik-Pay Payroll 4.2.20 is reported to store the KwikPay.mdb database file with insecure permissions, potentially allowing local users to access employment and payment data. The vendor disputes this vulnerability, stating the mdb file is a template and does not contain sensitive information; also...

CVE-2006-1050

Kwik-Pay Payroll 4.2.20, and possibly other versions, stores the KwikPay.mdb database file with insecure permissions, which allows local users to obtain sensitive information such as employment and payment data. NOTE: the provenance of this information is unknown; the details are obtained solely...

Multiple sql injection, and xss vulnerabilities in Pay pal Storefront

Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: High Title: Multiple sql injection, and xss vulnerabilities in Pay pal Storefront Date: March 25, 2005 Summary: There are multiple sql injection, xss vulnerabilities in the Pay pal Storefront...

Microsoft FlexGo

Microsoft FlexGo makes it possible to lower the entry cost of PCs and let people pay for computers as they use them. This technology supports two models today: a pay-as-you-go model enabled by prepaid cards or a subscription model with monthly payments...