CVE-2009-3246

The CVE-2009-3246 entry corresponds to an SQL injection vulnerability in spnews.php of MyBuxScript PTC-BUX, exploitable remotely via the id parameter in an spnews action to the default URI. The connected NVD entry provides a base score of 7.5 (HIGH) with network attack vector and low complexity, ...

CVE-2009-3246: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in spnews.php in MyBuxScript PTC-BUX allows remote attackers to execute arbitrary SQL commands via the id parameter in an spnews action to the default URI. NOTE: some of these details are obtained from third party information...

Mybuxscript PTC-BUX SQL Injection

------------------------------------------------------------ Mybuxscript PTC-BUX spnews.php SQL Injection Vulnerability ------------------------------------------------------------ Author.: HxH Contact: HxHatlivedotat --------------------------- Script.: Mybuxscript PTC-BUX BASIC/ADVANCE/PRO...

Mybuxscript PTC-BUX - 'spnews.php' SQL Injection

------------------------------------------------------------ Mybuxscript PTC-BUX spnews.php SQL Injection Vulnerability ------------------------------------------------------------ Author.: HxH Contact: HxHatlivedotat --------------------------- Script.: Mybuxscript PTC-BUX BASIC/ADVANCE/PRO...

Mybuxscript PTC-BUX (spnews.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Mybuxscript PTC-BUX spnews.php SQL Injection Vulnerability ============================================================ ----------------------------------------------------------...

Mybuxscript PTC-BUX (spnews.php) SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------ Mybuxscript PTC-BUX spnews.php SQL Injection Vulnerability ------------------------------------------------------------ Author.: HxH Contact: HxHatlivedotat --------------------------- Script.:...

Mybuxscript PTC-BUX - spnews.php SQL Injection

Mybuxscript PTC-BUX - spnews.php SQL Injection ------------------------------------------------------------ Mybuxscript PTC-BUX spnews.php SQL Injection Vulnerability ------------------------------------------------------------ Author.: HxH Contact: HxHatlivedotat ---------------------------...

Mybuxscript PTC-BUX (spnews.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Mybuxscript PTC-BUX spnews.php SQL Injection Vulnerability ============================================================ ----------------------------------------------------------...

e-Soft24 PTC Script 1.2 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43305/info e-Soft24 PTC Script is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting us...

PTC Script 1.2 Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + PTC Script Multiple 1.2 Remote XSS Vulnerabilities + Software : PTC Script + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Neocoderz,...

Design/Logic Flaw

The "Protect Worksheet" functionality in Mathsoft Mathcad 12 through 13.1, and PTC Mathcad 14, implements file access restrictions via a protection element in a gzipped XML file, which allows attackers to bypass these restrictions by removing this element...

CVE-2007-4600

The CVE-2007-4600 issue affects Mathcad 12–14 (Mathsoft/PTC Mathcad). The vulnerability arises from the Protect Worksheet feature, which uses a gzipped XML file containing a element; attackers can bypass protections by removing this element, allowing access to protected data. Impact is described...

CVE-2007-4600

The "Protect Worksheet" functionality in Mathsoft Mathcad 12 through 13.1, and PTC Mathcad 14, implements file access restrictions via a protection element in a gzipped XML file, which allows attackers to bypass these restrictions by removing this element...

CVE-2007-4600: Undefined Security Weakness

The "Protect Worksheet" functionality in Mathsoft Mathcad 12 through 13.1, and PTC Mathcad 14, implements file access restrictions via a protection element in a gzipped XML file, which allows attackers to bypass these restrictions by removing this element...