ZYCHCMS V03 '/include/page.asp' file has an arbitrary directory traversal vulnerability

ZYCHCMS is an enterprise website management system. An arbitrary directory traversal vulnerability exists in the ZYCHCMS V03 '/include/page.asp' file. This allows an attacker to traverse directories and view sensitive directory and file information...

cityofpaloalto.org XSS vulnerability

Vulnerable URL: http://www.cityofpaloalto.org/404.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 129774 VIP website status:| No Check cityofpaloalto.org SSL connection:| Grade:...

aronde-immobilier.fr XSS vulnerability

Open Bug Bounty ID: OBB-230392 Description| Value ---|--- Affected Website:| aronde-immobilier.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Login Authentication Bypass Vulnerability in ZYCHCMS V06 /admin/login.asp Page

ZYCHCMS is an enterprise website management system. A login authentication bypass vulnerability exists in the /admin/login.asp page in ZYCHCMS V06. It allows an attacker to log in to the system backend and gain administrator privileges...

ZYCHCMS V04 Arbitrary File Write Vulnerability in /include/page.asp File

ZYCHCMS is an enterprise website management system. An arbitrary file write vulnerability exists in the ZYCHCMS V04 /include/page.asp file. The vulnerability allows attackers to write scripts to arbitrary files to gain server privileges...

CVE-2016-8360: Double Free

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server allowing an attacker to modify memory locations and possibly cause a denial of service or the execution of...

U.S. Dept Of Defense: Access to job creation web page on http://████████

Summary: Hi DoD Team ! It looks like we may access to an ASP form on http://███ which enables any unauthenticated web user to create new jobs in the website database without any control. Furthermore, it seems that asp files are created with txt extensions too that enable the files to be readable...

CVE-2017-5882

Cross-site scripting XSS vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Sea days OA system MessageInfoDis. asp parameters VOID SQL injection vulnerability

No description provided by source...

melissadata.com XSS vulnerability

Vulnerable URL: http://www.melissadata.com/lookups/ZipDemo2000.asp?ZipCode=55555'"--!...

PT-2016-7498

Name of the Vulnerable Software and Affected Versions Moxa SoftCMS versions prior to 1.6 Description A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server, allowing an attacker to modify memory locations and possibly cause a denial of...

Imperva 11.5 Detection Bypass

Bypass Imperva by confusing HTTP Pollution Normalization Engine Author: Wiswat Aswamenakul Environment: Tested with Imperva Version: 11.5 and Web Backend as IIS + ASP Description: One of technique that attackers use to bypass web application firewall is to use HTTP pollution attack. The attack ca...

ASP Gateway 1.0.0 Database Disclosure

======================================================================== | Title : ASP Gateway 1.0.0 Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 1.0.0 | Vendor :...

FineCMS AttachmentController arbitrary file upload vulnerability

Source link: http://www.hackersb.cn/shenji/170.html Is still AttachmentController, of course, this is no longer kindeditorupload upload the file and then include the file so simple, but directly uploaded the script execution. This time the problem is ajaxswfuploadAction method, the method code is...

ASP Web Shell Detection (China Chopper)

Binary data 9489.prm...

rcz6.cn XSS vulnerability

Vulnerable URL: http://www.rcz6.cn/domain/Whois.asp?domain=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check rcz6.cn SSL connection:| Grade: F Coordinated...

datasun.com.cn XSS vulnerability

Vulnerable URL: http://www.datasun.com.cn/download2.asp?file=F231.pdf" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

SQL injection vulnerability in the XH parameter of the student/XJB1.asp page of the informatization management system of Guangzhou Zhongda Dongri Education Technology Co.

Guangzhou Zhongda Dongri Education Technology Co., Ltd. education information management system is to provide an integrated campus information solution. A SQL injection vulnerability exists in the informatization management system of Guangzhou CUHK Dongri Education Technology Co. The lack of...

letsplaychess.com XSS vulnerability

Vulnerable URL: http://letsplaychess.com/chessclubs/asplogin.asp?USERNAME=' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 158676 VIP website status:| No Check letsplaychess.com SS...

The vulnerability in Microsoft.NET Framework software allows a malicious attacker to compromise the accessibility of protected information.

Vulnerability exists in Microsoft ASP.NET, allowing attackers to cause server failures in ASP.NET applications...