9 matches found
EUVD-2010-5246
Malware in sbrugna...
CVE-2010-5287
SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-5287
SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-5287
CVE-2010-5287 : The connected records confirm a SQL injection in Cornerstone Technologies’ webConductor, via default.php and the id parameter, allowing remote command execution. The vulnerability is described consistently across NVD and related records as an input validation flaw leading to arbit...
PT-2013-1381
Name of the Vulnerable Software and Affected Versions webConductor affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the default.php file. Recommendations At the moment, there is no information...
CVE-2010-5287: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute arbitrary SQL commands via the id parameter...
webConductor - default.asp SQL Injection
webConductor - default.asp SQL Injection source: https://www.securityfocus.com/bid/41042/info webConductor is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
webConductor - 'default.asp' SQL Injection
source: https://www.securityfocus.com/bid/41042/info webConductor is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...