821 matches found
NPDS REvolution Cross Site Scripting
Vulnerability ID: HTB22363 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinnpds.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 29 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixe...
NPDS REvolution 10.02 - download.php SQL Injection
NPDS REvolution 10.02 - download.php SQL Injection source: https://www.securityfocus.com/bid/40156/info NPDS Revolution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
Blind SQL injection vulnerability in NPDS REvolution
Vulnerability ID: HTB22364 Reference: http://www.htbridge.ch/advisory/blindsqlinjectionvulnerabilityinNPDSREvolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 29 April 2010 Vulnerability Type: Blind SQL Injecti...
XSS vulnerability in NPDS
Vulnerability ID: HTB22363 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinnpds.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 29 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixe...
NPDS REvolution 10.02 - 'download.php' SQL Injection
source: https://www.securityfocus.com/bid/40156/info NPDS Revolution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...
NPDS REvolution 10.02 - topic Cross-Site Scripting
NPDS REvolution 10.02 - topic Cross-Site Scripting source: https://www.securityfocus.com/bid/40157/info NPDS Revolution is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute...
NPDS REvolution 10.02 - 'topic' Cross-Site Scripting
source: https://www.securityfocus.com/bid/40157/info NPDS Revolution is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...
Multiple Vulnerabilities in NPDS REvolution
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in NPDS REvolution which could be exploited to perform cross-site scripting XSS, script insertion and CSRF attacks and execute arbitrary SQL commands in applications database. 1 Cross-site scripting vulnerabilities ...
CVE-2008-6977
Cross-site scripting XSS vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a summary action...
CVE-2008-6978
Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in pics/, related to the uploadmedia action in album.asp...
Unrestricted file upload
Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in pics/, related to the uploadmedia action in album.asp...
CVE-2008-6978
Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in pics/, related to the uploadmedia action in album.asp...
CVE-2008-6978
CVE-2008-6978 : Full Revolution aspWebAlbum 3.2 is affected by an unrestricted file upload vulnerability. Uploading a file with an executable extension via the uploadmedia action in album.asp to the pics/ path enables remote code execution. The connected documents do not provide patch or remediat...
CVE-2008-6977
CVE-2008-6977 is an XSS vulnerability in Full Revolution aspWebAlbum 3.2, affecting album.asp where a crafted message parameter in a summary action can inject arbitrary script/HTML. The base metrics show a MEDIUM severity with network access, no authentication, and partial integrity impact. The d...
CVE-2008-6977
Cross-site scripting XSS vulnerability in album.asp in Full Revolution aspWebAlbum 3.2 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a summary action...
EUVD-2008-6937
Unrestricted file upload vulnerability in Full Revolution aspWebAlbum 3.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in pics/, related to the uploadmedia action in album.asp...
aspWebAlbum 3.2 (Upload/SQL/XSS) Multiple Remote Vulnerabilities
No description provided by source. - Discovered bay AleminKrali ==== - aspWebAlbum 3.2 - Script Download "http://www.fullrevolution.com" - aspWebAlbum 3.2 Single Site License | $60.00 : - HomePage al3m.blogspot.com...
Unrestricted file upload
Unrestricted file upload vulnerability in calendaradmin.asp in Full Revolution aspWebCalendar 2008 allows remote attackers to upload and execute arbitrary code via the FILE1 parameter in an uploadfileprocess action, probably followed by a direct request to the file in calendar/eventimages/...
MS Windows Explorer Unspecified .DOC File Denial of Service Exploit
No description provided by source. MS Windows Explorer Unspecified .DOC File Denial of Service Exploit Download the file anywhere excluding on desktop and try to browse it with the Windows explorer and you'll see how it crashes ! - Tested on Windows XP Service Pack 1 and Service Pack 2. Hope the...