Sql injection

Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-2338

Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-2338

Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-2338

The CVE-2010-2338 entry concerns multiple SQL injection vulnerabilities in redir.asp of VU Web Visitor Analyst, exploitable by passing crafted values to the (1) username or (2) password parameters to trigger arbitrary SQL execution. This is supported by the core description across NVD/NVD-derived...

Microsoft Outlook Web Access redir.asp URI重新定向漏洞

BUGTRAQ ID: 31765 CVECAN ID: CVE-2008-1547 Microsoft Exchange Server是一款流行的邮件服务器，Outlook Web Access是Exchange中用于通过Web浏览器读取和发送邮件的工具。 Outlook Web Access的exchweb/bin/redir.asp页面存在重新定向漏洞，远程攻击者可以在邮件中发送特制的URL，如果用户已经登录的话，则点击该链接就会被立即重新定向到钓鱼网站；如果用户未登录，则点击后会显示登录页面，然后在成功认证后将用户重新定向到钓鱼网站。 Microsoft Outlook Web...

Microsoft Outlook Web Access for Exchange Server 2003 - redir.asp Open Redirection

Microsoft Outlook Web Access for Exchange Server 2003 - redir.asp Open Redirection source: https://www.securityfocus.com/bid/31765/info Outlook Web Access is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploi...

CVE-2007-6138

SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp aka the Login Page. NOTE: some of these details are obtained from third party information...