EUVD-2006-6831

Malware in sbrugna...

EUVD-2006-0838

Malware in sbrugna...

EUVD-2005-2064

Malware in sbrugna...

EUVD-2006-6811

Malware in sbrugna...

CVE-2018-18776

CVE-2018-18776 concerns MicroStrategy Web 7, where an XSS vulnerability arises because input is not sufficiently encoded. The issue is exploitable via the admin/admin.asp ShowAll parameter, enabling a cross-site scripting attack. The product is deprecated, and multiple external sources (including...

PT-2018-14641

Name of the Vulnerable Software and Affected Versions Microstrategy Web version 7 Description The issue is related to insufficient encoding of user-controlled inputs, leading to a Cross-Site Scripting XSS vulnerability. This can be exploited via the ShowAll parameter in the "admin/admin.asp"...

CVE-2018-18776: Improper Neutralization of Input During Web Page Generation

Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability via the admin/admin.asp ShowAll parameter. NOTE: this is a deprecated product...

Sql injection

admin/check.asp in DKCMS 9.4 allows SQL Injection via an ASPSESSIONID cookie to admin/admin.asp...

PT-2018-14681

Name of the Vulnerable Software and Affected Versions DKCMS version 9.4 Description The issue allows SQL Injection via an ASPSESSIONID cookie to admin/admin.asp. This is related to the admin/check.asp file in DKCMS. Recommendations For DKCMS version 9.4, consider restricting access to the...

Cross site request forgery (csrf)

Xiao5uCompany 1.7 has CSRF via admin/Admin.asp...

CVE-2018-14960

Xiao5uCompany 1.7 has CSRF via admin/Admin.asp...

CVE-2018-14960

Xiao5uCompany 1.7 has CSRF via admin/Admin.asp...

CVE-2018-14960

CVE-2018-14960 affects Xiao5uCompany 1.7. The vulnerability is a CSRF via admin/Admin.asp, allowing remote attackers to add administrator or other user accounts (per CNVD CNVD-2018-17499). Impact and exploit details: the CSRF could compromise account management, potentially affecting all users th...

PT-2018-12837

Name of the Vulnerable Software and Affected Versions Xiao5uCompany version 1.7 Description The issue is related to a CSRF Cross-Site Request Forgery vulnerability. It affects the admin/Admin.asp endpoint. Recommendations For version 1.7, update to a version that includes a fix for this issue, if...

CVE-2018-14960: Cross-Site Request Forgery (CSRF)

Xiao5uCompany 1.7 has CSRF via admin/Admin.asp...

Authentication flaw

West Wind Web Server 6.x does not require authentication for /ADMIN.ASP...

PT-2018-17638

Name of the Vulnerable Software and Affected Versions West Wind Web Server versions 6.x Description The issue concerns the lack of authentication requirement for the /ADMIN.ASP endpoint. Recommendations For West Wind Web Server versions 6.x, consider restricting access to the /ADMIN.ASP endpoint ...

CVE-2018-6569

West Wind Web Server 6.x is affected: the /ADMIN.ASP page can be accessed without authentication, allowing an attacker to perform actions with potential program execution, termination, data disclosure, or DoS as described in linked CVE records. This is supported by multiple sources (CVE-2018-6569...

CVE-2018-6569: Improper Authentication

West Wind Web Server 6.x does not require authentication for /ADMIN.ASP...

My School Script Data Base Download Vulnerability

No description provided by source. ======================================================================================== | Title : My School Script Data Base Download Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Bug : DB ====================== Exploit By indoushka...