CVE-2007-5182

Cross-site scripting XSS vulnerability in mail.asp in Netkamp Emlak Scripti allows remote attackers to inject arbitrary web script or HTML via the 1 Email parameter, and possibly the 2 Ad, 3 Soyad, 4 Konu, and 5 Mesaj parameters to iletisim.asp...

CVE-2007-5182: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mail.asp in Netkamp Emlak Scripti allows remote attackers to inject arbitrary web script or HTML via the 1 Email parameter, and possibly the 2 Ad, 3 Soyad, 4 Konu, and 5 Mesaj parameters to iletisim.asp...

CVE-2007-5181: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL commands via the ilanid parameter...

Netkamp Emlak Scripti - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/25875/info Netkamp Emlak Scripti is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and an SQL-injection issue, because the application fails to sanitize user-supplied input. A successful exploit may allow an...

Netkamp Emlak Scripti - Multiple Input Validation Vulnerabilities

Netkamp Emlak Scripti - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/25875/info Netkamp Emlak Scripti is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and an SQL-injection issue, because the application fails to...

netkamp-sql.txt

Netkamp Emlak Scripti XSS & Sql Ýnjections Vulnerability Software: Netkamp Emlak Scripti download: not free350 YTL sale: http://www.netkamp.com/netemlak.asp demo: http://netemlak.netkamp.com/ Found By: GeFORC3 G3 Exploit & example :...

Sql injection

Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbitrary SQL commands via the 1 productid or 2 catid parameter in a product mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2007-4075

Cross-site scripting XSS vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Cross site scripting

Cross-site scripting XSS vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-4076

Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbitrary SQL commands via the 1 productid or 2 catid parameter in a product mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2007-4076

Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbitrary SQL commands via the 1 productid or 2 catid parameter in a product mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2007-4075

Cross-site scripting XSS vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-4075

CVE-2007-4075: XSS in index.asp of Alisveris Sitesi Scripti. The vulnerability occurs in the search mod action via the q parameter, allowing remote attackers to inject arbitrary script/HTML. Affected software is the Alisveris Sitesi Scripti package; root cause is a reflected/parameter-based XSS i...

CVE-2007-4076

CVE-2007-4076 describes multiple SQL injection vulnerabilities in index.asp of the Alisveris Sitesi Scripti. The issue allows remote attackers to execute arbitrary SQL commands through the (1) product_id or (2) cat_id parameters in a product mod action. The NVD entry notes the provenance is from ...

CVE-2007-4076: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbitrary SQL commands via the 1 productid or 2 catid parameter in a product mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2007-4075: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Alisveris Sitesi Scripti - 'index.asp' SQL Injection

source: https://www.securityfocus.com/bid/25005/info Alisveris Sitesi Scripti is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

sitesi-xss.txt

Alýþveriþ Sitesi Scripti XSS Vulnerability. Software: Alýþveriþ Sitesi Scripti download : not free 350 YTL http://www.aspindir.com/goster/5024 demo: http://www.hemensatarim.com/ Found By: GeFORC3 G3 Exploit: This xss works on Alýþveriþ Sitesi Scripti's search...

Alisveris Sitesi Scripti - index.asp SQL Injection

Alisveris Sitesi Scripti - index.asp SQL Injection source: https://www.securityfocus.com/bid/25005/info Alisveris Sitesi Scripti is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues...

duyuru-sql.txt

Fıstıq Duyuru Scripti Remote Sql İnjection File : goster.asp Sql : -1%20union+all+select+0,kullaniciadi,sifre,3+from+admin Admin Name + Admin Pass Admin Menu: yoneticiii/default.asp Thanks : Ajann , Xoron , ApAci , ErNE , Uyuss , Eno7 , Thehacker , Enjexion .pl Exploit Code : !/usr/bin/perl Scrip...