americaneducationfair.com XSS vulnerability

Vulnerable URL: http://americaneducationfair.com/previousfair/result.asp?fair=spring=1"...

Enthrallweb eHomes 1.0 Multiple (SQL/XSS) Vulnerabilities

No description provided by source. Title : Enthrallweb eHomes 1.0 Multiple SQL/XSS Vulnerabilities Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL---------------------------------------------------------...

CVE-2006-6205

Multiple cross-site scripting XSS vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web script or HTML via the 1 city or 2 State parameter...

CVE-2006-6205

Multiple cross-site scripting XSS vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web script or HTML via the 1 city or 2 State parameter...

CVE-2006-6205

CVE-2006-6205 affects Enthrallweb eHomes; the vulnerability is multiple XSS in result.asp via the city or State parameter. Connected PT-2006-6835 notes affected software but does not specify vulnerable versions or a fixed release, and no remediation is provided in the sources. Other records reite...

PT-2006-6835 · Enthrallweb · Enthrallweb Ehomes

Name of the Vulnerable Software and Affected Versions: Enthrallweb eHomes affected versions not specified Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the city or State...

PT-2006-6834 · Enthrallweb · Enthrallweb Ehomes

Name of the Vulnerable Software and Affected Versions: Enthrallweb eHomes affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in various parameters, including the cid parameter to...

CVE-2006-6205: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web script or HTML via the 1 city or 2 State parameter...

CVE-2006-6204: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to a dircat.asp; the 2 sid parameter to b dirSub.asp; the 3 TYPEID parameter to c types.asp; the 4 ADID parameter to d homeDetail.asp; the 5 cat parameter ...

Enthrallweb eHomes - 'result.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could...

CyberBuild - 'result.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17829/info CyberBuild is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...