EUVD-2005-1296

Malware in sbrugna...

StorePortal 2.63 Default.ASP Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13358/info StorePortal is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

StorePortal2.63_sqlinj.txt

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Multiple SQL Injections in...

CVE-2005-1293

Multiple SQL injection vulnerabilities in default.asp in StorePortal 2.63 allow remote attackers to execute arbitrary SQL commands via the 1 language, 2 bpic, 3 idcategory, 4 content, 5 keyword, or 6 idproduct parameter...

CVE-2005-1293

CVE-2005-1293 involves multiple SQL injection vulnerabilities in StorePortal 2.63’s default.asp. The affected component is the web application entry point (default.asp) with six injectable parameters: language, bpic, idcategory, content, keyword, and idproduct. The underlying issue is improper in...

CVE-2005-1293

Multiple SQL injection vulnerabilities in default.asp in StorePortal 2.63 allow remote attackers to execute arbitrary SQL commands via the 1 language, 2 bpic, 3 idcategory, 4 content, 5 keyword, or 6 idproduct parameter...

Multiple SQL Injections in StorePortal 2.63

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Multiple SQL Injections in...

StorePortal 2.63 - 'default.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13358/info StorePortal is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise o...