5066 matches found
Banking@Home 2.1 'Login.asp' Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/33721/info Banking@Home is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
VP-ASP Shopping Cart 6.50 ShopContent.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24033/info VP-ASP Shopping Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...
MOJO's IWMS <= 7 SQL Injection & Cross Site Scripting
No description provided by source. Exploit Title: MOJO's IWMS = 7 SQL Injection & Cross Site Scripting. Date: 2/02/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.comhttp://gmail.com | www.DigitalWhisper.co.ilhttp://www.DigitalWhisper.co.il Software Link: http://www.mojo.co.il Version: = 7 Tested on...
eWebEditor 1.x - (WYSIWYG) Remote File Upload
No description provided by source. ============================================================================= Tilte: eWebEditor v1.x WYSIWYG Remote File Upload . ============================================================================= Date....................: 22-05-2010...
DotNetNuke Remote File upload Vulnerability
No description provided by source. DotNetNuke Remote File upload Vulnerability Prodcut: DotNetNuke Home : www.DZ4All.cOm/Cc Vunlerability : Remote File upload Risk : High Dork : inurl:tabid/176/Default.aspx or inurl:portals/0/ Original discovery and credit goes to: Alireza Afzali of ISCN Team Fou...
Microsoft Internet Explorer 6.0 URL Local Resource Access Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10472/info Microsoft Internet Explorer is prone to a security weakness that may permit unauthorized access to local resources on a client computer. This will effectively bypass security restrictions implemented in Interne...
Virtual GuestBook 2.1 - Remote Database Disclosure Vulnerability
No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
Virtual Programming VP-ASP 4.00/5.00 shopsearch.asp SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9133/info It has been reported that VP-ASP may be prone to a SQL injection vulnerability that may allow an attacker to disclose sensitive information by supplying malicious SQL code to the underlying database. The problem...
philboard 1.02 - SQL Injection Vulnerability
No description provided by source. + + |ViRuSHiMa@YouR SyS|\ + ||||\ + |||||, + |||||||| + @''@|@@@ % + philboard v1.02 sql injection Vulnerability +===========================================================================|| Script : philboard v1.02 || ! Author : ViRuSHiMa || ! Site :...
Pre ASP Job Board 'emp_login.asp' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32572/info Pre ASP Job Board is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the brows...
BrightSuite Groupware SQL Injection Vulnerability
No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...
Xtreme ASP Photo Gallery 2.0 displaypic.asp catname Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21138/info Xtreme ASP Photo Gallery is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues and an HTML-injection issue because the application fails to properly...
Smart ASP Survey XSS and SQL Injection Vulnerabilities
No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \...
Microsoft IIS 3.0/4.0 Using ASP And FSO To Read Server Files Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/230/info The File System Object FSO may be called from an Active Server Page ASP to display files that exist outside of the web server's root directory. FSO allows calls to be made utilizing ../ to exit the local director...
Active Server Corner ASP Calendar 1.0 Administrative Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11931/info ASP Calendar is reported prone to an unauthorized administrative access vulnerability. An unauthorized remote attacker can access an administrative script and potentially gain administrative access to the...
ASP-Rider Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11933/info A remote SQL injection vulnerability reportedly affects ASP-Rider Web blog. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An...
ASP NEWS <= 3.0 - (news_detail.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : ASP NEWS = V3 newsdetail.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.planetgraphic.de/ SQL--------------------------------------------------------- http://target/path//newsdetail.asp?id=SQL Example:...
ASP Fast Forum Error.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15233/info ASP Fast Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
ASP Stats Generator <= 2.1.1 - SQL Injection Vulnerabilities
No description provided by source. /------------------------------------------------ IHS Public advisory -------------------------------------------------/ ASP Stats Generator SQL-ASP injection - Code Excution ASP Stats Generator is a powerful website counter, completely written in ASP programmin...
Comrie Software Pay Roll Time Sheet & Punch Card Authentication Bypass
No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass Vulnerability Version:1.0 Price:50$ Vendor url:http://www.comriesoftware.net/codewidgets/product.aspx?key=123 Published:...