CVE-2008-4051

Cross-site scripting XSS vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Smart Survey 1.0 - surveyresults.asp Cross-Site Scripting

Smart Survey 1.0 - surveyresults.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/30841/info Smart Survey is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Smart Survey 1.0 - 'surveyresults.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30841/info Smart Survey is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

DD-WRT - Site Survey SSID Script Injection

source: https://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit this issue to execute arbitrary script code i...

DD-WRT - Site Survey SSID Script Injection

DD-WRT - Site Survey SSID Script Injection source: https://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit th...

CVE-2008-3310

SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-3310

SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-3310

CVE-2008-3310 describes an SQL injection in default.asp of the Pre Survey Poll application, exploitable via the catid parameter to execute arbitrary SQL commands remotely. The vulnerability is borne by the web application’s input handling, enabling an attacker to influence the underlying database...

presurveypoll-sql.txt

PRE SURVEY POLL Remote Sql Injection DreamTurk / sqL Lov3r'Z Crew Co. 2008 Downlod: http://www.preproject.com/poll.asp / Price $28.00 Demo : http://www.preproject.com/poll/default.asp Sql : http://localhost/patch/default.asp?catid=1+union+select+0,username+from+users...

Pre Survey Poll (default.asp catid) SQL Injection Vulnerability

No description provided by source. PRE SURVEY POLL Remote Sql Injection DreamTurk / sqL Lov3r'Z Crew Co. 2008 Downlod: http://www.preproject.com/poll.asp / Price $28.00 Demo : http://www.preproject.com/poll/default.asp Sql :...

Pre Survey Poll - catid SQL Injection

Pre Survey Poll - catid SQL Injection PRE SURVEY POLL Remote Sql Injection DreamTurk / sqL Lov3r'Z Crew Co. 2008 Downlod: http://www.preproject.com/poll.asp / Price $28.00 Demo : http://www.preproject.com/poll/default.asp Sql :...

Pre Survey Generator - default.asp SQL Injection

Pre Survey Generator - default.asp SQL Injection source: https://www.securityfocus.com/bid/30349/info Pre Survey Generator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...

Pre Survey Poll (default.asp catid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Pre Survey Poll default.asp catid SQL Injection Vulnerability =============================================================== PRE SURVEY POLL Remote Sql Injection DreamTurk /...

Pre Survey Generator - 'default.asp' SQL Injection

source: https://www.securityfocus.com/bid/30349/info Pre Survey Generator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...

ClassWeb 2.0.3 (BASE) Remote File Inclusion Vulnerabilities

No description provided by source. ClassWeb = 2.03 Remote File Include Vulnerabilities D.Script: http://sourceforge.net/projects/classweb/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group Exploit:...

ClassWeb 2.0.3 (BASE) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== ClassWeb 2.0.3 BASE Remote File Inclusion Vulnerabilities =========================================================== ClassWeb = 2.03 Remote File Include Vulnerabilities D.Script:...

ClassWeb 2.0.3 - BASE Remote File Inclusion

ClassWeb 2.0.3 - BASE Remote File Inclusion ClassWeb = 2.03 Remote File Include Vulnerabilities D.Script: http://sourceforge.net/projects/classweb/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group Exploit:...

Nabopoll 1.2 (result.php surv) Remote Blind SQL Injection Exploit

No description provided by source. ? Nabopoll Blind SQL Injection P0C Exploit Download: www.nabocorp.com/nabopoll/ coded by s0cratex Contact: [email protected] errorreporting0; iniset"maxexecutiontime",0; // just change the default values... $srv = "localhost"; $path = "/poll"; $port = 80;...

Nabopoll 1.2 (result.php surv) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= Nabopoll 1.2 result.php surv Remote Blind SQL Injection Exploit ================================================================= 0day.today 2018-03-01...