EUVD-2009-2610

Malware in sbrugna...

EUVD-2009-2611

Malware in sbrugna...

CVE-2009-2615

Multiple cross-site scripting XSS vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 zadminlogin.asp, 2 zforgot.asp, and possibly unspecified other components. NOTE: the provenance of this information is...

CVE-2009-2616

SQL injection vulnerability in zadminlogin.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

SitePal 1.1 - (Auth Bypass) SQL Injection Vulnerability

No description provided by source. SitePal v1.1Auth Bypass Remote SQL Injection Vulnerability ---------------------------------------------------------- author: R3d-D3v!L Date: 15.12.2009 7!M3:1-35 Home: www.Xp10.ME contact: N/A ----------------------------------------------------------- Exploit:...

SitePal 1.1 - Authentication Bypass

SitePal v1.1Auth Bypass Remote SQL Injection Vulnerability ---------------------------------------------------------- author: R3d-D3v!L Date: 15.12.2009 7!M3:1-35 Home: www.Xp10.ME contact: N/A ----------------------------------------------------------- Exploit: username:admin password: X' or '...

SitePal v1.1(Auth Bypass) SQL Injection Vulnerability

No description provided by source. SitePal v1.1Auth Bypass Remote SQL Injection Vulnerability ---------------------------------------------------------- author: R3d-D3v!L Date: 15.12.2009 7!M3:1-35 Home: www.Xp10.ME contact: N/A ----------------------------------------------------------- Exploit:...

SitePal v1.1(Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== SitePal v1.1Auth Bypass SQL Injection Vulnerability ===================================================== Exploit: username:admin password: X' or ' 1=1-- admin login for demo:...

SitePal 1.1 - Authentication Bypass

SitePal 1.1 - Authentication Bypass SitePal v1.1Auth Bypass Remote SQL Injection Vulnerability ---------------------------------------------------------- author: R3d-D3v!L Date: 15.12.2009 7!M3:1-35 Home: www.Xp10.ME contact: N/A ----------------------------------------------------------- Exploit...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 zadminlogin.asp, 2 zforgot.asp, and possibly unspecified other components. NOTE: the provenance of this information is...

Sql injection

SQL injection vulnerability in zadminlogin.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2615

Multiple cross-site scripting XSS vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 zadminlogin.asp, 2 zforgot.asp, and possibly unspecified other components. NOTE: the provenance of this information is...

CVE-2009-2616

SQL injection vulnerability in zadminlogin.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2616

The CVE-2009-2616 vulnerability concerns DataCheck Solutions SitePal 1.x, where a flaw in z_admin_login.asp enables remote execution of arbitrary SQL commands via unspecified vectors. The available sources confirm an SQL injection in the login component but do not specify affected versions beyond...

CVE-2009-2615

DataCheck Solutions SitePal 1.x is affected by multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via the page parameter to z_admin_login.asp and z_forgot.asp (and possibly other components). Root cause is unsafely reflected input without proper saniti...

CVE-2009-2616

SQL injection vulnerability in zadminlogin.asp in DataCheck Solutions SitePal 1.x allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2615

Multiple cross-site scripting XSS vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 zadminlogin.asp, 2 zforgot.asp, and possibly unspecified other components. NOTE: the provenance of this information is...