Aria-Security.Net Research: Rapid Classified HotList Image

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://www.freshink.net/rc-links.htm Demo: http://www.lite.freshink.net/adminlogon.asp Google Search: Developed by: GA Soft Username: anything' OR 'x'='x password: anything' OR 'x'='x...

[SECURITY] Fedora 7 Update: Django-0.96.1-1.fc7

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 8 Update: Django-0.96.1-1.fc8

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

Rapid Classified - 'AgencyCatResult.asp' SQL Injection

source: https://www.securityfocus.com/bid/26379/info Rapid Classified is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acce...

Rapid Classified - AgencyCatResult.asp SQL Injection

Rapid Classified - AgencyCatResult.asp SQL Injection source: https://www.securityfocus.com/bid/26379/info Rapid Classified is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

URL spoof in address bar

KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property...

CVE-2007-3553

Cross-site scripting XSS vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script or HTML via a URL to the "Secondary Login Page", as demonstrated using 1 pls/ and 2 pls/MSBEP004/. NOTE: the provenance of this information is...

CVE-2007-3553: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script or HTML via a URL to the "Secondary Login Page", as demonstrated using 1 pls/ and 2 pls/MSBEP004/. NOTE: the provenance of this information is...

Oracle Rapid Install Web Server - Secondary Login Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/24697/info Oracle Rapid Install Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to inject HTML and script code into the browser ...

Oracle Rapid Install Web Server - Secondary Login Page Cross-Site Scripting

Oracle Rapid Install Web Server - Secondary Login Page Cross-Site Scripting source: https://www.securityfocus.com/bid/24697/info Oracle Rapid Install Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker can...

CVE-2006-6930

SQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6929

Rapid Classified 3.1 is affected by CVE-2006-6929 due to multiple cross-site scripting (XSS) vulnerabilities. The issue enables injection of arbitrary web script/HTML via parameters across several scripts: id in reply.asp and view_print.asp, SH1 in search.asp, name in reply.asp, and dosearch in a...

CVE-2006-6929

Multiple cross-site scripting XSS vulnerabilities in Rapid Classified 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a reply.asp or b viewprint.asp, the 2 SH1 parameter to c search.asp, the 3 name parameter to reply.asp, or the 4 dosearch parameter to ...

CVE-2006-6930

Rapid Classified 3.1 is affected by an SQL injection in viewad.asp via the id parameter, enabling remote execution of arbitrary SQL commands. Root cause: improper handling of the id input in viewad.asp. Affected component: Rapid Classified 3.1 (viewad.asp). Impact: arbitrary SQL execution with pa...

CVE-2006-6930

SQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2007-1210 · Rapid · Rapid Classified

Name of the Vulnerable Software and Affected Versions: Rapid Classified version 3.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "viewad.asp" file. Recommendations: For Rapid Classified version 3.1, consider...

CVE-2006-6930: Undefined Security Weakness

SQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6929: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Rapid Classified 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a reply.asp or b viewprint.asp, the 2 SH1 parameter to c search.asp, the 3 name parameter to reply.asp, or the 4 dosearch parameter to ...

PT-2007-1209 · Rapid · Rapid Classified

Name of the Vulnerable Software and Affected Versions: Rapid Classified version 3.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various parameters in different scripts,...

rapidclassified31.txt

vendor site: http://www.4u2ges.com/ product : Rapid Classified v3.1 bug: multiple xss get & injection sql risk : medium injection sql : /viewad.asp?id='sql xss : /reply.asp?id=xss /viewprint.asp?id=xss /search.asp?categoryName=1&SH1=xss /reply.asp?id=50120815480100001&name=xss...