Sql injection

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action...

CVE-2008-2688

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action...

CVE-2008-2688

ASPilot Pilot Cart 7.3 is affected by SQL injection via the article parameter (pilot.asp and kb.asp) that is used in SQL queries without proper sanitization, enabling remote arbitrary SQL execution. This CVE (CVE-2008-2688) covers the article parameter; related entries confirm the same issue acro...

CVE-2008-2688

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action...

CVE-2008-2688: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action...

ASPilot Pilot Cart 7.3 (article) Remote SQL Injection Vulnerability

No description provided by source. |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ \L\ \ | |...

ASPilot Pilot Cart 7.3 (article) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== ASPilot Pilot Cart 7.3 article Remote SQL Injection Vulnerability ===================================================================...

aspilot-sql.txt

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| + Script Name : Pilot...

McAfee ePolicy Orchestrator SiteManager ActiveX Multiple Buffer Overflows (CVE-2007-1498)

Multiple vulnerabilities exist in the McAfee ePolicy Orchestrator ePO, and the Protection Pilot products. McAfee ePolicy Orchestrator is a central management system to enforce and monitor system security. A remote attacker could exploit this issue by convincing a user to visit a specially crafted...

pilotcart.txt

vendor site:http://www.pilotcart.com/ product:Pilot Cart V.7.2 bug:injection sql risk:high injection sqlpost : in the search engine: http://site.com/pilot.asp?pg=search&mode=results variables : srch='sql&searchBy=Products laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: saps.audit@gmail....

Pilot Cart V.7.2 [ injection sql (post) ]

vendor site:http://www.pilotcart.com/ product:Pilot Cart V.7.2 bug:injection sql risk:high injection sqlpost : in the search engine: http://site.com/pilot.asp?pg=search&mode=results variables : srch='sql&searchBy=Products laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: saps.audit@gmail....

Pilot Cart 7.2 - Pilot.asp SQL Injection

Pilot Cart 7.2 - Pilot.asp SQL Injection source: https://www.securityfocus.com/bid/21065/info Pilot Cart is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker ...

Pilot Cart 7.2 - 'Pilot.asp' SQL Injection

source: https://www.securityfocus.com/bid/21065/info Pilot Cart is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

McAfee HTTP header processing buffer overflow

Added: 10/06/2006 CVE: CVE-2006-5156 BID: 20288 OSVDB: 29421 Background McAfee ePolicy Orchestrator and Protection Pilot are centralized security management products. These products include an HTTP server implemented by the NAISERV.exe program. Problem A buffer overflow vulnerability in the McAfe...

McAfee HTTP header processing buffer overflow

Added: 10/06/2006 CVE: CVE-2006-5156 BID: 20288 OSVDB: 29421 Background McAfee ePolicy Orchestrator and Protection Pilot are centralized security management products. These products include an HTTP server implemented by the NAISERV.exe program. Problem A buffer overflow vulnerability in the McAfe...

[Full-disclosure] McAfee EPO Buffer Overflow

McAfee Epolicy 3.5.0 / Protection Pilot 1.1.0 Buffer Overflow www.remote-exploit.org muts at remote-exploit org - Product Information McAfeeR ePolicy OrchestratorR is a security management solution that gives you a coordinated defense against malicious threats and attacks. As your central hub, yo...

IRIX pmpost vulnerability

SGI Security Advisory Title: pmpost vulnerability Number: 20010601-01-I Date: June 24, 2002 Reference: SGI Security Advisory 20010601-01-A Reference: CVE-2001-0823 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that the Performance Co-Pilot...

IRIX pmcd Denial of Service vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: pmcd Denial of Service vulnerability Number: 20020407-01-I Date: April 30, 2002 Reference: CAN-2000-1193 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that it is possible to feed...

IRIX 6.5.x - Performance Co-Pilot Remote Denial of Service

IRIX 6.5.x - Performance Co-Pilot Remote Denial of Service source: https://www.securityfocus.com/bid/4642/info Performance Co-Pilot PCP is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open...

IRIX 6.5.x - Performance Co-Pilot Remote Denial of Service

source: https://www.securityfocus.com/bid/4642/info Performance Co-Pilot PCP is a set of services to support system-level performance monitoring developed by SGI. It has traditionally been an IRIX product, however SGI has made it open source and it is now available for Linux systems. A...