ColdOfficeView 2.04 Multiple Blind SQL Injection Vulnerabilities

No description provided by source. ColdGen - coldofficeview v2.04 Remote Blind SQL Injection vulnerabilities Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC's 1. http://target/path/index.cfm?fuseaction=ViewEventDetails&EventID=Blind SQLi...

CVE-2010-4910

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...

Sql injection

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...

CVE-2010-4910

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...

CVE-2010-4910: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action...

PT-2011-1845

Name of the Vulnerable Software and Affected Versions ColdGen ColdCalendar version 2.06 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the EventID parameter in a "ViewEventDetails" action on the index.cfm file. Recommendations For ColdGen...

ColdOfficeView 2.04 Blind SQL Injection

ColdGen - coldofficeview v2.04 Remote Blind SQL Injection vulnerabilities Vendor: http://www.coldgen.com/ Found by: mrme net-ninja.net PoC's 1. http://target/path/index.cfm?fuseaction=ViewEventDetails&EventID=Blind SQLi http://target/path/index.cfm?fuseaction=ViewEventDetails&EventID=1 and 1=1 tr...