EUVD-2005-2064

Malware in sbrugna...

EUVD-2006-6831

Malware in sbrugna...

EUVD-2006-6811

Malware in sbrugna...

EUVD-2006-0838

Malware in sbrugna...

CVE-2018-18776

CVE-2018-18776 concerns MicroStrategy Web 7, where an XSS vulnerability arises because input is not sufficiently encoded. The issue is exploitable via the admin/admin.asp ShowAll parameter, enabling a cross-site scripting attack. The product is deprecated, and multiple external sources (including...

CVE-2018-18776: Improper Neutralization of Input During Web Page Generation

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the admin/admin.asp ShowAll parameter. NOTE: this is a deprecated product...

Sql injection

admin/check.asp in DKCMS 9.4 allows SQL Injection via an ASPSESSIONID cookie to admin/admin.asp...

CVE-2018-14960

Xiao5uCompany 1.7 has CSRF via admin/Admin.asp...

Cross site request forgery (csrf)

Xiao5uCompany 1.7 has CSRF via admin/Admin.asp...

CVE-2018-14960

Xiao5uCompany 1.7 has CSRF via admin/Admin.asp...

CVE-2018-14960

CVE-2018-14960 affects Xiao5uCompany 1.7. The vulnerability is a CSRF via admin/Admin.asp, allowing remote attackers to add administrator or other user accounts (per CNVD CNVD-2018-17499). Impact and exploit details: the CSRF could compromise account management, potentially affecting all users th...

CVE-2018-14960: Cross-Site Request Forgery (CSRF)

Xiao5uCompany 1.7 has CSRF via admin/Admin.asp...

Authentication flaw

West Wind Web Server 6.x does not require authentication for /ADMIN.ASP...

CVE-2018-6569

West Wind Web Server 6.x is affected: the /ADMIN.ASP page can be accessed without authentication, allowing an attacker to perform actions with potential program execution, termination, data disclosure, or DoS as described in linked CVE records. This is supported by multiple sources (CVE-2018-6569...

CVE-2018-6569: Improper Authentication

West Wind Web Server 6.x does not require authentication for /ADMIN.ASP...

My School Script Data Base Download Vulnerability

No description provided by source. ======================================================================================== | Title : My School Script Data Base Download Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Bug : DB ====================== Exploit By indoushka...

GuangAnSiheng /admin/admin.asp 登录绕过漏洞

No description provided by source...

Sql injection

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

CVE-2013-7216: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

ezCourses - admin.asp Security Bypass

ezCourses - admin.asp Security Bypass source: https://www.securityfocus.com/bid/49907/info ezCourses is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input. Attackers could exploit the issue to bypass certain security restrictions and add or change t...