New breakthrough fckeditor vulnerability-vulnerability warning-the black bar safety net

After testing, this method through the kill asp, aspx version, not for php. Before the many ways, such as uploading. asp and other types of files; create. asp, etc. directory...... Today encountered a fck editor, followed before a lot of times like, the above methods to no avail. Create. asp; the...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CVE-2009-5103

Cross-site scripting XSS vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the email variable...

CVE-2011-3340

CVE-2011-3340 affects Netvolution CMS 2.5.8 (ASP) where the HTTP Referer header parsing allows blind SQL injection. The vulnerability enables remote attackers to alter content, exfiltrate data (usernames, plaintext passwords), and potentially execute commands on the database server without authen...

CVE-2009-5102

CVE-2009-5102 affects ATCOM Netvolution 1.0 ASP. The vulnerability is in default.asp and allows SQL injection via the bpe_nid parameter, enabling remote attackers to execute arbitrary SQL commands. The connected documents provide the same description across sources; no exploitation details or pat...

CVE-2009-5102

SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL commands via the bpenid parameter...

CVE-2009-5103: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the email variable...

The copper plate while the net mass mailing statistics system v1. 2 vulnerability and the Fix-vulnerability warning-the black bar safety net

Team:makebugs Author: fate 'Fenlei. asp IF Request. QueryString"Action"="del" Then ID=Request. QueryString"ID" IF Countss "tui","Fenlei",ID 0 then 'Slightly IF Request. QueryString"Action"="Add" Then Tname=Request. Form"Typename" Set Rs=Server. CreateObject"adodb. Recordset" Sql="Select From Fenl...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Netvolution referer header SQL injection vulnerability

Netvolution CMS v2.5.8 is vulnerable to a blind SQL injection attack in the HTTP “referer” header. A malicious user may utilize this vulnerability to modify content on the vulnerable website, inject malicious javascript code to a visitor’s browser, collect CMS usernames and plaintext passwords an...

Netvolution CMS 2.5.8 Blind SQL Injection

Netvolution CMS v2.5.8 is vulnerable to a blind SQL injection attack in the HTTP “referer” header. A malicious user may utilize this vulnerability to modify content on the vulnerable website, inject malicious javascript code to a visitor’s browser, collect CMS usernames and plaintext passwords an...

ezCourses Remote Permission Bypass

,-.-. | | | | | o ,---. o | o | | |,---.,---.|---.,---.,---.|---. |---|,---.,---.|/ .,---.,---. |---|,---.,---.,---.,---..,---.|--- .,---.,---. | | |,---|| || || |---'| | | |,---|| | \ || || | | |---.---.| || |,---|| || || | ' '---^---| ' ---'---'o '---^---' '---|o '---'---'---'---'---^---'---' '...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Pheunix SQL Injection

================================================ Exploit Title : PHEUNIX SQL Injection Vulnerability Google Dork : intext:"Site By : PHEUNIX" inurl:service.php?service= Date : 2011-24-09 Author : nGa Sa Lu GaNgst3r Service Link : http://pheunix.co.in/portfolio.asp Tested on : Vista Platform :...

Wind crossing technology ASP online shopping v11. 9 1 9 the vulnerability and fix-vulnerability warning-the black bar safety net

MakeBug [email protected] 'conn. asp % On Error Resume Next servermappath=server. mappath"/the serverinfo. asa" 'Slightly DBstr=""&txt. ReadLine&"" 'database address name 'Slightly % Read the serverinfo. asa 'the serverinfo. asa /chinammcdata/chinammcshop. mdb Use method:...

A-Cart Pro SQL Injection

Exploit Title: A-CART Pro SQL Injection Vulnerability Author: J.O Contact: [email protected] Website: http://www.m-h-a.org From : Morocco ---------------------------------------- A-CART Pro SQL Injection Vulnerability Vendor: http://www.alanward.net/acart/ Demo :...

A-Cart 2.0 SQL Injection

Exploit Title: A-CART 2.0 SQL Injection Vulnerability Author: J.O Contact: [email protected] Website: http://www.m-h-a.org From : Morocco ---------------------------------------- A-CART 2.0 SQL Injection Vulnerability Vendor: http://www.alanward.net/acart/ Demo :...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Aspgwy Access 1.0.0 Cross Site Scripting

=========================================================== aspgwyaccess1.0.0 XSS Vulnerability ----------------------------------------------------------- foun by :kurd-team group : kurdish hackers team contact : [email protected] site : kurdteam.org...