[Aria-Security] Image Racer SearchResults.asp SQL INJECTION vuln.

Aria-Security Team Image Racer SearchResults.asp SQL Injection Vendor: http://www.junctionquest.com/Software.asp Example: http://www.TARGET.com/SearchResults.asp?SearchWord=SQL COMMAND&WordSearchCrit=Yes&image.x=0&image.y=0 Example : -1 'union select username,password from admin where FIND IT YOU...

CVE-2005-4768

SQL injection vulnerability in manageaccount.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a manageaccount action to index.php...

CVE-2005-4768

CVE-2005-4768 describes an SQL injection in manage_account.php of Tux Racer TuxBank 0.7x and 0.8. The vulnerability is exploitable via the id parameter in a manageaccount action to index.php, potentially allowing remote attackers to execute arbitrary SQL commands. Public references list multiple ...

CVE-2005-4732

CVE-2005-4732 describes multiple cross-site scripting (XSS) vulnerabilities in index.php of Tux Bank/TuxRacer 0.7x and 0.8, exploitable via the (1) name and (2) description parameters. Impact is remote script/HTML injection; CVSSv2 base score 4.3 (Medium). Connected documents confirm the issue bu...

CVE-2005-4732

Multiple cross-site scripting XSS vulnerabilities in index.php in Tux Racer TuxBank 0.7x and 0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 name and 2 description parameters...

CVE-2005-4768

SQL injection vulnerability in manageaccount.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter in a manageaccount action to index.php...