Enthrallweb

15 CVEs in 12 Enthrallweb products, including Eclassifieds, Ehomes, Eshopping Cart. Newest: CVE-2009-0252 (2009-01-22).

Enthrallweb products with known CVEs

ProductCVEs
Eclassifieds2
Ehomes2
Eshopping Cart2
Dragon Business Directory Pro1
Ecars1
Ecoupons1
Ejobs1
Emates1
Enews1
Epages1
Ephotos1
Ereservations1
Enthrallweb CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2009-02522009-01-22Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the (1) Login p…
CVE-2006-68222006-12-29myprofile.asp in Enthrallweb eClassifieds does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users…
CVE-2006-68212006-12-29myprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modi…
CVE-2006-68202006-12-29myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to m…
CVE-2006-68062006-12-28SQL injection vulnerability in newsdetail.asp in Enthrallweb eMates 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVE-2006-68052006-12-28SQL injection vulnerability in newsdetail.asp in Enthrallweb eJobs allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVE-2006-68042006-12-28SQL injection vulnerability in bus_details.asp in Dragon Business Directory - Pro (aka Dragon Internet Business Search Directory - Pro) 3.01.12 and earlier all…
CVE-2006-68032006-12-28SQL injection vulnerability in Types.asp in Enthrallweb eCars 1.0 allows remote attackers to execute arbitrary SQL commands via the Type_id parameter.
CVE-2006-68022006-12-28SQL injection vulnerability in actualpic.asp in Enthrallweb ePages allows remote attackers to execute arbitrary SQL commands via the Biz_ID parameter.
CVE-2006-62082006-12-01Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the (1) AD_ID, (2) cat_id, (3)…
CVE-2006-62052006-12-01Multiple cross-site scripting (XSS) vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web script or HTML via the (…
CVE-2006-62042006-12-01Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to (a) dircat.a…
CVE-2006-60742006-11-24Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via (1) the ProductID parameter i…
CVE-2006-60732006-11-24Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) ProductID parameter i…
CVE-2006-30272006-06-15Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) CAT_ID para…