Sql injection

SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the iPro parameter...

CVE-2007-0053

SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the iPro parameter...

CVE-2007-0053

SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the iPro parameter...

CVE-2007-0053

The CVE-2007-0053 issue affects the ASP SiteWare autoDealer 2.0 and earlier. The vulnerability is a SQL injection in detail.asp via the iPro parameter, enabling remote attackers to execute arbitrary SQL commands. This is documented with a base CVSSv2 score of 7.5 (HIGH) and indicates potential pa...

autoDealer <= 2.0 (iPro) Remote SQL Injection Vulnerability

Title : autoDealer = 2.0 iPro Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.aspsiteware.com $$ : $60.00 SQL--------------------------------------------------------- http://target/path//detail.asp?iPro=SQL Example:...

CVE-2001-0555

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. dot dot attack through 1 the SITEWare Editor's Desktop or 2 the template parameter in SWEditServlet...

CVE-2001-0555

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. dot dot attack through 1 the SITEWare Editor's Desktop or 2 the template parameter in SWEditServlet...

CVE-2001-0555

ScreamingMedia SITEWare has a directory-traversal vulnerability in SITEWare Editor’s Desktop (versions 2.5–3.1) and in the SWEditServlet template parameter, allowing remote attackers to read world-readable files within the SiteWare web root. The root cause is inadequate input validation that enab...

ScreamingMedia SITEware does not adequately validate user input thereby allowing arbitrary file disclosure via directory traversal

Overview A vulnerability exists in ScreamingMedia's SiteWare Editor's Desktop that allows an intruder to read arbitrary files within the SiteWare web hierarchy. Description SiteWare Editor's Desktop is a web-based administration tool for manipulating ScreamingMedia content on a SiteWare web serve...

ScreamingMedia SITEWare source code disclosure vulnerability

FS Advisory ID: FS-061201-18-SMSW Release Date: June 11, 2001 Product: ScreamingMedia SITEWare Vendor: ScreamingMedia Inc. http://www.screamingmedia.com Vendor Advisory: http://www.screamingmedia.com/security/sms1001.php Type: Source code disclosure vulnerability Severity: High Author: Mike Shema...

SiteWare 2.5/3.0/3.1 Editor Desktop - Directory Traversal

source: https://www.securityfocus.com/bid/2868/info Screaming Media is a provider for custom web content. SiteWare Editor Desktop is the web-based administration tool for managing Screaming Media content. SiteWare Editor Desktop is prone to directory traversal attacks which can lead to disclosure...