Virtual Support Office XP 2 - 'MyIssuesView.asp' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28247/info Virtual Support Office XP VSO-XP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

CVE-2008-1354

The CVE-2008-1354 issue concerns SQL injection in MyIssuesView.asp of Advanced Data Solutions Virtual Support Office-XP (VSO-XP). The vulnerable component is the MyIssuesView.asp page, with the root cause described as unsafe handling of the Issue_ID parameter allowing arbitrary SQL execution. The...

CVE-2008-1354

SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP VSO-XP allows remote attackers to execute arbitrary SQL commands via the IssueID parameter...