CVE-2008-4161: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in searchinv.php in Assetman 2.5b allows remote attackers to execute arbitrary SQL commands and conduct session fixation attacks via a combination of crafted order and orderby parameters in a searchall action...

AssetMan 2.5-b - SQL Injection using Session Fixation

============================================================ AssetMan v2.5-b SQL Injection using Session Fixation Attack ============================================================ ; , ,; '. ;: :; :: :: :: :: ': : :. : ;' :: :: ' .' '; ;' '. :: :; ;: :: ; :;. ,;: :: :; :;: ,;" :: ::. ':; ..,.; ;...

AssetMan v2.5-b SQL Injection using Session Fixation Attack

Exploit for unknown platform in category web applications =========================================================== AssetMan v2.5-b SQL Injection using Session Fixation Attack =========================================================== ; , ,; '. ;: :; :: :: :: :: ': : :. : ;' :: :: ' .' '; ;' '...