Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown

CVE-2010-4737

Disclosure Date: February 16, 2011 (last updated October 04, 2023)
SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropResort parameter.
0
0
Attacker Value
Unknown

CVE-2010-4703

Disclosure Date: January 20, 2011 (last updated October 04, 2023)
SQL injection vulnerability in default.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PageId parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
0
Attacker Value
Unknown

CVE-2009-3343

Disclosure Date: September 24, 2009 (last updated October 04, 2023)
SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropId parameter.
0
0
Attacker Value
Unknown

CVE-2006-3135

Disclosure Date: July 13, 2006 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) news_id parameter in the (a) news module, (2) searchstring parameter in (b) the search module, (3) id parameter in (c) the webshop module, (4) username parameter in (d) index.php, and (5) Name, (6) Address, (7) Zip, (8) City, (9) Country, and (10) Email fields during (e) a user profile update.
0
0
Attacker Value
Unknown

CVE-2006-2931

Disclosure Date: June 21, 2006 (last updated October 04, 2023)
CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files.
0
0
Attacker Value
Unknown

CVE-2006-2911

Disclosure Date: June 21, 2006 (last updated October 04, 2023)
SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the username parameter.
0
0
Attacker Value
Unknown

CVE-2006-2820

Disclosure Date: June 05, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote attackers to inject arbitrary web script or HTML via a comment, possibly involving a javascript URI in the SRC attribute of an IMG element.
0
0
Attacker Value
Unknown

CVE-2006-2684

Disclosure Date: May 31, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the search module in CMS Mundo 1.0 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter.
0
0