Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Aleris Software Systems Web Publisher Calendar SQL injection Oct 23 2007 10:04PM
Joseph giron13 gmail com


http://www.alerisdata.com/articles/home.asp

There exists an SQL injection vulnerability within the calendar section of a Aleris Software Systems web publisher. It seems thats Aleris uses this same calendar with every site they make that utilizes the publisher.

www.example.com/calendar/page...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus