CVE-2009-2613

CVE-2009-2613 involves multiple XSS vulnerabilities in DataCheck Solutions LinkPal 1.x. The issue allows remote attackers to inject arbitrary web script or HTML via the page parameter to z_loginfailed.asp, z_admin_login.asp, z_forgot.asp, and possibly other components. The vulnerabilities are evi...

CVE-2009-2613: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in DataCheck Solutions LinkPal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 zloginfailed.asp, 2 zadminlogin.asp, 3 zforgot.asp, and possibly unspecified other components. NOTE: the provenance of thi...

CVE-2009-2619: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.asp in DataCheck Solutions V-SpacePal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2615: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in DataCheck Solutions SitePal 1.x allow remote attackers to inject arbitrary web script or HTML via the page parameter to 1 zadminlogin.asp, 2 zforgot.asp, and possibly unspecified other components. NOTE: the provenance of this information is...

CVE-2009-2048

Cross-site scripting XSS vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified...

CVE-2009-2047: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions CRS before 7.01 SR2 in Cisco Unified Contact Center Express aka CCX server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified vectors...

CVE-2009-2366

SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the 1 password parameter in 1.1 and 2 ppassword parameter in 1.5. NOTE: some of these details are obtained from third party information...

CVE-2009-2365

SQL injection vulnerability in login.asp in DataCheck Solutions GalleryPal FE 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in login.asp in DataCheck Solutions GalleryPal FE 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the 1 password parameter in 1.1 and 2 ppassword parameter in 1.5. NOTE: some of these details are obtained from third party information...

CVE-2009-2365

SQL injection vulnerability in login.asp in DataCheck Solutions GalleryPal FE 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2366

CVE-2009-2366 describes an SQL injection in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5. The vulnerability stems from unsafely handling user-supplied credentials in login.asp, specifically the (1) password parameter for ForumPal FE 1.1 and (2) p_password for ForumPal 1.5, allowing remote...

CVE-2009-2365

CVE-2009-2365 describes a SQL injection vulnerability in the login.asp page of DataCheck Solutions GalleryPal FE 1.5. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The impact is partial confidentiality, integrity, and availability as per the NVD desc...

CVE-2009-2366

SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the 1 password parameter in 1.1 and 2 ppassword parameter in 1.5. NOTE: some of these details are obtained from third party information...

CVE-2009-2365: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.asp in DataCheck Solutions GalleryPal FE 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2366: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the 1 password parameter in 1.1 and 2 ppassword parameter in 1.5. NOTE: some of these details are obtained from third party information...

JNM Solutions DB Top Sites 1.0 - 'vote.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43699/info JNM Solutions DB Top Sites is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...

Sql injection

SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-2082

SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-2082

SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: some of these details are obtained from third party information...