dmagazine.com XSS vulnerability

Vulnerable URL: http://www.dmagazine.com/Errors/500.asp?aspxerrorpath=" Details: Description| Value ---|--- Patched:| Yes, at 15.07.2016 Latest check for patch:| 15.07.2016 23:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 45120 VIP website status:| Yes Chec...

LebiShop Mall Backend Arbitrary File Write Vulnerability

LebiShop mall system is an online mall system using ASP.NET language. The system is widely used in small and medium-sized e-commerce enterprises. The mall system's management background provides a system template file editing function, the function of the page file parameters have not been strict...

KesionCMS ASP版 /item/?c-5,key-1.html SQL注入漏洞

0x01漏洞简介 KesionCMS ASP版在/item/?c-5,key-1.html存在伪静态注入漏洞。 0x02漏洞详情 很明显的一处注入；但是好像需要闭合，先提交了证明下注入 http://.../item/?c-5,key-1%27.html Microsoft JET Database Engine 错误 '80040e14' 语法错误 在查询表达式 'Verific=1 and deltf=0 And Title Like '%1'%' Order by ID Desc' 中。 /item/Index.asp，行 618 0x03修复方案 过滤。...

Shop7z v2.9 getpassword3.asp 文件 username 参数 SQL注入漏洞

No description provided by source...

Microsoft ASP.NET Cross-Site Request Forgery Vulnerability

Microsoft ASP.NET, part of .NET FrameWork, is a Microsoft technology that is a server-side scripting technology that enables scripts embedded in Web pages to be executed by Internet servers. Microsoft ASP.NET suffers from a cross-site request forgery vulnerability that could allow a remote attack...

ASP Forums 2.1 Database Disclosure

| Title : ASP Forums version 2.1 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : http://adyou.me/4TVD ========================================================= !/usr/bin/perl -w Author : indoushka use...

ico.org XSS vulnerability

Vulnerable URL: http://www.ico.org/search2.asp?searchtext=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 441181 Google Pagerank| 6 VIP...

we7cms directory traversal vulnerability

we7cms is a content management system based on asp.net development. The we7cms V3.0 system has multiple directory traversal vulnerabilities that can be exploited by attackers to obtain sensitive information through database initialization and table building statements...

SQL injection vulnerability in the oabusyusername parameter of the target/m.asp page of the PointClear MIS management information system.

PointClear MIS Management Information System is an enterprise-level instant messaging platform launched by PointClear. An SQL injection vulnerability exists in the oabusyusername parameter on the target/m.asp page of the PointClear MIS enterprise management information system, which allows...

Blade - A Webshell Connection Tool With Customized WAF Bypass Payloads

Blade is a webshell connection tool based on console, currently under development and aims to be a choice of replacement of Chooper 中国菜刀. Chooper is a very cool webshell client with widly typies of server side scripts supported, but Chooper can only work on Windows opreation system, so this is th...

Mosca - Static Analysis Tool To Find Bugs

Just another Simple static analysis tool to find bugs like a grep unix command, at mosca have a modules, that was call egg, each egg is a simple config to find bug at especific language like PHP,Ruby,ASP etc... Example of egg config at directory "egg", If Mosca read a line with vunerability of eg...

ASP Dynamika 2.5 Cross Site Scripting

Exploit Title : ASP Dynamika 2.5 Cross Site Scripting Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.dynamika.co.il/ Google Dork : "Powered By : Dynamika" Date : 2015/12/08 Version : 2.5 Vulnerable Paramter siteid= Bypass '"--alert0xa Demo:...

ASP Dynamika 2.5 File Upload / SQL Injection

Asp Dynamika 2.5 Upload Vulnerability ===================================== Author : indoushka Vondor : http://www.dynamika.co.il/dynamikadesign Dork : Powered By : Dynamika Tested on : windows 8.1 Français V.Pro ============================================================ FCKeditor Upload :...

These Top 10 Programming Languages Have Most Vulnerable Apps on the Internet

A new research showed that Scripting languages, in general, give birth to more security vulnerabilities in web applications, which raised concerns over potential security bugs in millions of websites. The app security firm Veracode has released its State of Software Security: Focus on Application...

visitchester.com vulnerability

Vulnerable URL: http://www.visitchester.com/engine/referrer.asp?web=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 20.12.2015 Latest check for patch:| 20.12.2015 11:33 GMT Vulnerability status:| Publicly disclosed Alexa Rank| 753682 Google Pagerank| 5 VIP website...

visitmaidstone.com vulnerability

Vulnerable URL: http://www.visitmaidstone.com/engine/referrer.asp?web=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 2505725 Google Pagerank| 3 VIP website status:| No Check...

visit1066country.com vulnerability

Vulnerable URL: http://www.visit1066country.com/engine/referrer.asp?web=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 1053687 Google Pagerank| 4 VIP website status:| No Check...

mapsupply.com XSS vulnerability

Vulnerable URL: https://www.mapsupply.com/CloseUp2.asp?Image=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18547045 Google Pagerank| ...

The vulnerability of the Microsoft .NET Framework software platform allows a perpetrator to inject arbitrary web or HTML code.

The vulnerability of the ASP.NET software platform, Microsoft .NET Framework, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using a specially crafted variable value...

某通用型电子采购平台存在任意文件上传漏洞，可直接上传asp文件批量GETSHELL

简要描述： --求个邀请码 详细说明： 1.看看前人提交的漏洞：http://.../bugs/wooyun-2014-070117 ，测试拿下shell之后偶然发现另外一个上传点，同样没做任何过滤，可直接穿asp后门 谷歌：inurl:/custom/GroupNewsList.aspx 2：上传点 http://xxx/library/editornew/Editor/temp.asp 漏洞证明： 随便点开一个网站进去 成功上传 http://...:90/library/editornew/Editor/NewImage/201511722102813827.asp 3：更多案例...