GuangAnSiheng /admin/admin.asp 登录绕过漏洞

No description provided by source...

Sql injection

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

CVE-2013-7216: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

PT-2013-6296

Name of the Vulnerable Software and Affected Versions Classifieds Creator version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the ID parameter to "demo/classifieds/product.asp", or the UserID or Password field to...

PT-2013-6293

Name of the Vulnerable Software and Affected Versions C2C Forward Auction Creator version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the pa parameter to the "auction/asp/list.asp" API endpoint, or the UserID or Password parameters...

ezCourses - admin.asp Security Bypass

ezCourses - admin.asp Security Bypass source: https://www.securityfocus.com/bid/49907/info ezCourses is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input. Attackers could exploit the issue to bypass certain security restrictions and add or change t...

B2B Horizontal Marketplace Creator 2.0 SQL Injection

--------------------------------------------------------- Portal Name: B2B Horizontal Marketplace Creator Version: 2.0 Vendor: http://www.etoshop.com Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir Vulnerability : Auth Bypass SQL Injection Vulnerability...

Sql injection

Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the user parameter aka UserName field or 2 the pass parameter aka Pass field to a admin/admin.asp or b the default URI under admin/. NOTE: some of these detai...

CVE-2009-0447

Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the user parameter aka UserName field or 2 the pass parameter aka Pass field to a admin/admin.asp or b the default URI under admin/. NOTE: some of these detai...

Sql injection

Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 hitcounter.asp, 2 userdelete.asp, and 3 userupdate.asp; 4 the userid parameter to adminlogin.asp aka the USERNAME field in admin.asp; and 5 the PassWord paramete...

Design/Logic Flaw

StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp...

CVE-2008-0843

StatCounteX 3.0 and 3.1 are affected by a vulnerability that allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp. The available sources corroborate the product/version and the existence of the flaw but do not provide detailed ro...

CVE-2008-0843

StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp...

CVE-2008-0843: Undefined Security Weakness

StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp...

StatCounteX 3.0 & 3.1 Admin Vulnerability

StatCounteX 3.0 & 3.1 Admin Vulnerability No need to exploit ; An attacker can follow /admin.asp link and edit the scripts configurations google dork : intitle:StatCounteX 3.1 Yцnetici SekoMirza From Turkiye !...

CVE-2006-6848

The CVE-2006-6848 entry describes an SQL injection in ASPTicker 1.0, exploiting admin.asp via PATH_INFO (possibly related to the Password parameter) to allow remote execution of arbitrary SQL. This conveys a remote, unauthenticated risk with potential data exposure or modification. No remediation...

CVE-2006-6848: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin.asp in ASPTicker 1.0 allows remote attackers to execute arbitrary SQL commands via the PATHINFO, possibly related to the Password parameter...

CVE-2006-6828: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the grup parameter in admin.asp, or the id parameter in 2 default.asp or 3 admin.asp. NOTE: The provenance of this information is unknown; the details are obtained...

ASPTicker 1.0 (admin.asp) Login ByPass SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== ASPTicker 1.0 admin.asp Login ByPass SQL Injection Vulnerability ================================================================== Title : ASPTicker 1.0 admin.asp Remote...

ASPTicker 1.0 (admin.asp) Login ByPass SQL Injection Vulnerability

No description provided by source. Title : ASPTicker 1.0 admin.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.aspapps.com $$ : $ 17.00 SQL--------------------------------------------------------- http://target/path//admin.aspByPass Example:...