19 matches found
EUVD-2014-3140
Malware in sbrugna...
CVE-2014-3119
Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 searchstring parameter in the contacts module to index.php or allow remote attackers to execute arbitrary SQL commands via the updatekey parameter to ...
Sql injection
Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 searchstring parameter in the contacts module to index.php or allow remote attackers to execute arbitrary SQL commands via the updatekey parameter to ...
CVE-2014-3119
Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 searchstring parameter in the contacts module to index.php or allow remote attackers to execute arbitrary SQL commands via the updatekey parameter to ...
CVE-2014-3119
CVE-2014-3119 affects web2Project 3.1 and earlier. The vulnerability is due to insufficient sanitization of user inputs, allowing remote authenticated users to inject arbitrary SQL via the POST parameter search_string (index.php, contacts module) or via updatekey (do_updatecontact.php) or updatek...
CVE-2014-3119: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 searchstring parameter in the contacts module to index.php or allow remote attackers to execute arbitrary SQL commands via the updatekey parameter to ...
web2Project 3.3 Cross Site Scripting
| | Exploit Title: web2Project cms Cross Site ScriptingXSS | Exploit Author: Ashiyane Digital security Team | Vendor Homepage : https://web2project.net/ | Software Link: https://github.com/web2project/web2project/archive/version3.3.tar.gz | Version: 3.3 | Date: 2017-11-06 | Category: Webapps |...
Multiple SQL Injection Vulnerabilities in web2Project
Advisory ID: HTB23213 Product: web2Project Vendor: http://web2project.net Vulnerable Versions: 3.1 and probably prior Tested Version: 3.1 Advisory Publication: April 30, 2014 without technical details Vendor Notification: April 30, 2014 Vendor Patch: May 1, 2014 Public Disclosure: June 18, 2014...
Web2Project 2.3 - SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................Web2Project 2.3 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://forums.web2project.net/ Discovery...
web2Project 3.1 - Multiple Vulnerabilities
No description provided by source...
web2Project 3.1 - Multiple Vulnerabilities
web2Project 3.1 - Multiple Vulnerabilities Advisory ID: HTB23213 Product: web2Project Vendor: http://web2project.net Vulnerable Versions: 3.1 and probably prior Tested Version: 3.1 Advisory Publication: April 30, 2014 without technical details Vendor Notification: April 30, 2014 Vendor Patch: May...
web2Project 3.1 SQL Injection Vulnerability
Exploit for php platform in category web applications Product: web2Project Vendor: http://web2project.net Vulnerable Versions: 3.1 and probably prior Tested Version: 3.1 Advisory Publication: April 30, 2014 without technical details Vendor Notification: April 30, 2014 Vendor Patch: May 1, 2014...
web2Project 3.1 - Multiple Vulnerabilities
Advisory ID: HTB23213 Product: web2Project Vendor: http://web2project.net Vulnerable Versions: 3.1 and probably prior Tested Version: 3.1 Advisory Publication: April 30, 2014 without technical details Vendor Notification: April 30, 2014 Vendor Patch: May 1, 2014 Public Disclosure: June 18, 2014...
web2Project 3.1 SQL Injection
Advisory ID: HTB23213 Product: web2Project Vendor: http://web2project.net Vulnerable Versions: 3.1 and probably prior Tested Version: 3.1 Advisory Publication: April 30, 2014 without technical details Vendor Notification: April 30, 2014 Vendor Patch: May 1, 2014 Public Disclosure: June 18, 2014...
Multiple SQL Injection Vulnerabilities in web2Project
High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in web2Project, which can be exploited to perform SQL Injection attacks and gain complete access to vulnerable website. 1 SQL Injection in web2Project: CVE-2014-3119 1.1 The vulnerability exists due to insufficient...
Web2Project 2.3 SQL Injection Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................Web2Project 2.3 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://forums.web2project.net/...
Web2Project 2.3 - SQL Injection
------------------------------------------------------------------------ Software................Web2Project 2.3 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://forums.web2project.net/ Discovery Date..........4/21/2011 Tested...
Web2Project 2.3 SQL Injection
------------------------------------------------------------------------ Software................Web2Project 2.3 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://forums.web2project.net/ Discovery Date..........4/21/2011 Tested...
Web2Project 2.3 - SQL Injection
Web2Project 2.3 - SQL Injection ------------------------------------------------------------------------ Software................Web2Project 2.3 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://forums.web2project.net/ Discovery...