Lucene search
+L

10 matches found

Prion
Prion
•added 2010/06/18 9:30 p.m.•33 views

Sql injection

Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter. NOTE: some of these details are obtained from third party information...

7.5CVSS9.4AI score0.01151EPSS
SaveExploits2References6
NVD
NVD
•added 2010/06/18 9:30 p.m.•27 views

CVE-2010-2338

Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter. NOTE: some of these details are obtained from third party information...

7.5CVSS8.6AI score0.01151EPSS
SaveExploits2References6
Cvelist
Cvelist
•added 2010/06/18 9:00 p.m.•33 views

CVE-2010-2338

Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter. NOTE: some of these details are obtained from third party information...

8.6AI score0.01151EPSS
SaveExploits2References6
CVE
CVE
•added 2010/06/18 9:00 p.m.•52 views

CVE-2010-2338

The CVE-2010-2338 entry concerns multiple SQL injection vulnerabilities in redir.asp of VU Web Visitor Analyst, exploitable by passing crafted values to the (1) username or (2) password parameters to trigger arbitrary SQL execution. This is supported by the core description across NVD/NVD-derived...

7.5CVSS8.9AI score0.01151EPSS
SaveExploits2References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/18 12:00 a.m.•5 views

CVE-2010-2338: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter. NOTE: some of these details are obtained from third party information...

7.5CVSS6.4AI score0.01151EPSS
SaveExploits2References2
seebug.org
seebug.org
•added 2008/11/14 12:00 a.m.•2114 views

Microsoft Outlook Web Access redir.asp URI重新定向漏洞

BUGTRAQ ID: 31765 CVECAN ID: CVE-2008-1547 Microsoft Exchange Server是一款流行的邮件服务器,Outlook Web Access是Exchange中用于通过Web浏览器读取和发送邮件的工具。 Outlook Web Access的exchweb/bin/redir.asp页面存在重新定向漏洞,远程攻击者可以在邮件中发送特制的URL,如果用户已经登录的话,则点击该链接就会被立即重新定向到钓鱼网站;如果用户未登录,则点击后会显示登录页面,然后在成功认证后将用户重新定向到钓鱼网站。 Microsoft Outlook Web...

4.3CVSS6.6AI score0.48137EPSS
SaveExploits3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/10/21 12:00 a.m.•6 views

CVE-2008-1547: URL Redirection to Untrusted Site

Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter...

4.3CVSS6AI score0.48137EPSS
SaveExploits3References2
exploitpack
exploitpack
•added 2008/10/15 12:00 a.m.•633 views

Microsoft Outlook Web Access for Exchange Server 2003 - redir.asp Open Redirection

Microsoft Outlook Web Access for Exchange Server 2003 - redir.asp Open Redirection source: https://www.securityfocus.com/bid/31765/info Outlook Web Access is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploi...

7.4AI score
SaveExploits0
NVD
NVD
•added 2007/11/27 7:46 p.m.•24 views

CVE-2007-6138

SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp aka the Login Page. NOTE: some of these details are obtained from third party information...

7.5CVSS8.5AI score0.01137EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/11/27 12:00 a.m.•4 views

CVE-2007-6138: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp aka the Login Page. NOTE: some of these details are obtained from third party information...

7.5CVSS6.5AI score0.01137EPSS
SaveExploits1References2
Rows per page
Query Builder