6 matches found
CVE-2010-4856
SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...
CVE-2010-4856
SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...
Sql injection
SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...
CVE-2010-4856
SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...
CVE-2010-4856: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...
PT-2011-1791
Name of the Vulnerable Software and Affected Versions xWeblog version 2.2 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the tarih parameter in the arsiv.asp file. Recommendations For xWeblog version 2.2,...