Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2006-4872

Disclosure Date: September 19, 2006 (last updated October 04, 2023)
SQL injection vulnerability in search.asp in Keyvan1 (aka Keyvan Janghorbani) ECardPro 2.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.
0
Attacker Value
Unknown

CVE-2006-4871

Disclosure Date: September 19, 2006 (last updated October 04, 2023)
SQL injection vulnerability in search_run.asp in Keyvan1 (aka Keyvan Janghorbani) EShoppingPro 1.0 allows remote attackers to execute arbitrary SQL commands via the order parameter.
0
Attacker Value
Unknown

CVE-2006-2300

Disclosure Date: May 11, 2006 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to subList.asp, (2) SubjectID parameter to imageList.asp, or (3) Pic parameter to view.asp.
0
Attacker Value
Unknown

CVE-2006-2296

Disclosure Date: May 10, 2006 (last updated October 04, 2023)
SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
0
Attacker Value
Unknown

CVE-2005-1645

Disclosure Date: May 18, 2005 (last updated February 22, 2025)
Keyvan1 ImageGallery stores the image.mdb database under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.
0