5066 matches found
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Numara / BMC Track-It! FileStorageService Arbitrary File Upload
This module exploits an arbitrary file upload vulnerability in Numara / BMC Track-It! v8 to v11.X. The application exposes the FileStorageService .NET remoting service on port 9010 9004 for version 8 which accepts unauthenticated uploads. This can be abused by a malicious user to upload a ASP or...
CVE2014-6 2 8 7 analysis report-vulnerability warning-the black bar safety net
0x00 is written on the front In the cloud zone, see the HFS 2.3 x Remote command executioncatch the chicken hack doom of the article, just before analysis of binary vulnerabilities, this command injection vulnerability, or the first analysis, from the Internet under the HFS 2.3.279 this version u...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Maccms asp版本SQL注入
简要描述： asp版本安全性有待加强 详细说明： /user/index.asp sub tg dim userid,Ip,Ly,sql,rsUV,rs userid = be"get","uid" : userid=chkSqluserid,true on error resume next if isNapplication"LyLastDelDate" then application"LyLastDelDate" = Date if isNumuserid and apppopularizestate=1 then Ip = getIP Ly= getReferer Set rs...
Maccms asp版本后台XSS盲打
简要描述： Maccms ASP版本后台盲打。 详细说明： /inc/ajax.asp 255行reporterr函数 sub reporterr dim gvid,gname,gcontent,gaudit,gip,gtime gvid = be"post","gvid" : gvid = chkSqlgvid, True gname = be"post","gname" : gname = chkSqlgname, True gcontent = be"post","gcontent" : gcontent = chkSqlgcontent, True if not isNumgvi...
UranyumSoft Ýlan Servisi Database Disclosure Vulnerability
No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Mutlu...
Mesut Manþet Haber 1.0 - Auth Bypass Vulnerability
No description provided by source. ============================================================================== » Note : LionTurk.Turkblog.com Resmi Web Sitem :D ============================================================================== »Mesut Manþet Haber V1.0 Auth Bypass Vulnerability...
Microsoft IIS WebDAV Write Access Code Execution
No description provided by source. $Id: iiswebdavuploadasp.rb 10397 2010-09-20 15:59:46Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
Asset Manager 1.0 Shell Upload Vulnerability
No description provided by source. Title: Asset Manager Shell Upload Vulnerability Version: 1.0 Author: Shichemt Alen & NeTOwn3r Meher Assel Software Link: http://www.sourcecodeonline.com/details/assetmanagercmsandfileeditor.html Price : $35.00 Founded By NetOwn3r & Shichemt Alen Hi All Muslims...
Microsoft IIS ASP - Stack Overflow Exploit (MS06-034)
No description provided by source. include stdio.h include windows.h / Microsoft IIS ASP Stack Overflow ExploitMS06-034 by cocoruderfrankruderathotmail.com,2006/7/13 page:http://ruder.cdut.net/default.asp successfully test on Windows 2000 Server SP4+IIS5.0, On Windows 2003 Server+IIS6.0,because t...
Virtual Programming VP-ASP 4/5 shopdisplayproducts.asp Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9164/info A vulnerability has been reported to exist in VP-ASP software that may allow a remote user to launch cross-site scripting attacks. A remote attacker may exploit this issue to potentially execute HTML or script...
DmxReady Faqs Manager 1.2 - SQL Injection Vulnerability
No description provided by source. Exploit Title: DmxReady Faqs Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:incfaqsmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=faqs-manager-v1 Version: v1.2 Language: ASP Price : $99.97 Tested on:...
Microsoft IIS 4.0 ISAPI Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1911/info The ASP ISAPI file parser does not properly execute certain malformed ASP files that contain scripts with the LANGUAGE parameter containing a buffer of over 2200 characters and have the RUNAT value set as...
Blaze Apps Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a ASP...
DMXReady Members Area Manager Persistent XSS Vulnerability
No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: DMXReady Members Area Manager Persistent XSS Vendor url:http://www.dmxready.com/ Version:2 Price:295$ Published: 2010-09-06 GThanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic...
Microsoft Index Server 2.0 '%20' ASP Source Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1084/info Index Server can be used to cause IIS to display the source of .asp and possibly other server-side processed files. By appending a space %20 to the end of the filename specified in the 'CiWebHitsFile' variable,...
DmxReady Links Manager 1.2 - SQL Injection Vulnerability
No description provided by source. Exploit Title: DmxReady Links Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:inclinksmanager.asphttp://demo.dmxready.com/applications/CatalogManager/inccatalogmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link:...
CHILKAT ASP String (CkString.dll <= 1.1) SaveToFile() Inscure Method
No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------- bCHILKAT ASP String CkString.dll = 1.1 SaveToFile Inscure Method/b url: http://www.chilkatsoft.com/ author: shinnai...
ASP Forum Script new_message.asp forum_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/32571/info ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...