я3d D3v!L

CVE-2008-6873 EXPLOITDB text WRITEUP

Active Web Mail 4.0 - SQL Injection via TabOpenQuickTab1 Parameter

SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to (1) popaccounts.aspx, (2) addressbook.aspx, and (3) emails.aspx.

View Code

CVE-2008-5365 EXPLOITDB text WRITEUP

ActiveWebSoftwares ActiveVotes <2.2 - SQL Injection

SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter.

View Code

CVE-2008-5633 EXPLOITDB text WORKING POC

ActiveVotes 2.2 - SQL Injection via Username and Password Parameters

SQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information.

View Code

CVE-2008-6365 EXPLOITDB text WORKING POC

Ad Server Solutions Ad Management Software Java - SQL Injection via logon.jsp uname or pass Parameter

SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password, related to the uname or pass parameters to logon.jsp or logon_processing.jsp. NOTE: some of these details are obtained from third party information.

View Code