hici.net XSS vulnerability

Vulnerable URL: https://www.hici.net/comm/qf/process.asp?through=1=20=good=cq-getquote-lexis=asp=1"...

Sql injection

SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System OWOS Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information...

PT-2010-5344

Name of the Vulnerable Software and Affected Versions OnlineTechTools Online Work Order System OWOS Professional Edition version 2.10 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the password parameter in the "process.asp" file...

CVE-2010-4186: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System OWOS Professional Edition 2.10 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: some of these details are obtained from third party information...

CVE-2003-1268

Multiple SQL injection vulnerabilities in 1 addcustomer.asp, 2 addprod.asp, and 3 process.asp in a.shopKart 2.0.3 allow remote attackers to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters...

CVE-2003-1268: Undefined Security Weakness

Multiple SQL injection vulnerabilities in 1 addcustomer.asp, 2 addprod.asp, and 3 process.asp in a.shopKart 2.0.3 allow remote attackers to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters...