Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Microsoft IIS4 Exair Sample Site Denial Of Service (CVE-1999-0449)

Microsoft Internet Information Services IIS is a multi-featured server product that ships with all versions of Microsoft Windows 2000, XP and Server 2003. The product provides FTP, SMTP, NNTP and HTTP services. The HTTP component, known as the WWW Publishing Service, allows for the serving of...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Blaze Apps 1.4.0.051909 Cross Site Scripting / SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a ASP .NET 2 Content Management System. It...

Blaze Apps - Multiple Vulnerabilities

Blaze Apps - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a AS...

Blaze Apps - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a ASP .NET 2 Content Management System. It...

Specialized Data Systems (SDS) SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vendor : Specialized Data Systems SDS Product : Parent Connect Version : 2010.04.11 tested, all versions presumed vulnerable URL : http://www.schooloffice.com/newweb/Items.aspx?catId=c22 Description from vendor website: "SDS ... brings to your...

Unfixed XSS vulnerability at www.outlookindia.com

Security researcher Akash Mahajan, has submitted on 22/05/2010 a cross-site-scripting XSS vulnerability affecting www.outlookindia.com, which at the time of submission ranked 13869 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It ...

DotNetNuke - Arbitrary File Upload

DotNetNuke - Arbitrary File Upload DotNetNuke Remote File upload Vulnerability Prodcut: DotNetNuke Home : www.DZ4All.cOm/Cc Vunlerability : Remote File upload Risk : High Dork : inurl:tabid/176/Default.aspx or inurl:portals/0/ Original discovery and credit goes to: Alireza Afzali of ISCN Team Fou...

DotNetNuke Remote File upload Vulnerability

Exploit for php platform in category web applications =========================================== DotNetNuke Remote File upload Vulnerability =========================================== Prodcut: DotNetNuke Home : www.DZ4All.cOm/Cc Vunlerability : Remote File upload Risk : High Dork :...

eWebEditor 1.x Shell Upload

============================================================================= Tilte: eWebEditor v1.x WYSIWYG Remote File Upload . ============================================================================= Date....................: 22-05-2010 Author..................: Ma3sTr0-Dz Location...

Spaw Editor 1.0 / 2.0 Remote Shell Upload

Tilte: Spaw Editor v1.0 & 2.0 Remote File Upload . Date....................: 20-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: Spaw Editor v1 & v2 Impact..................: Remote Site Software ..........: http://www.spaweditor.com Sptnx...

With a simple asp Trojan back door, to find a asp Backdoor Trojan-exploit-warning-the black bar safety net

I waited for the side dishes yourself not write to asp of the horse, only with prawns to write, but the online streaming of all don't know is the several hand, it is inevitable that some ill-intentioned people will be on the inside plus the back door. Finally get to a shell and be someone stole h...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

ASP. Net under the C/S back door--WebAdmin 2. Y application details-vulnerability warning-the black bar safety net

Hello everyone, don't know you have not used even the WebAdmin 2. X? Well, yeah, the one that ASP. Net environment under the back door. That's my immature works, if have what not hand over the place but also hope bear with me. Oh, today?, or let the coupling to the“Huang po sells melon from sell...

MidiCart Shell Upload

Exploit Title: MidiCart PHP,ASP Shell Upload Vulnerability Date: 17.05.2010 Author: DigitALL Software Link: http://download.cnet.com/MidiCart-PHP-Shopping-Cart/3000-26494-10064577.html Version: All Version Tested on: DigitALL Xp Version x1 Code : dork : inurl:"ordermoney.php" or...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

MidiCart PHP,ASP Shell Upload Vulnerability

Exploit for php platform in category web applications =========================================== MidiCart PHP,ASP Shell Upload Vulnerability =========================================== Exploit Title: MidiCart PHP,ASP Shell Upload Vulnerability Date: 17.05.2010 Author: DigitALL Software Link:...

MidiCart PHPASP - Arbitrary File Upload

MidiCart PHPASP - Arbitrary File Upload Exploit Title: MidiCart PHP,ASP Shell Upload Vulnerability Date: 17.05.2010 Author: DigitALL Software Link: http://download.cnet.com/MidiCart-PHP-Shopping-Cart/3000-26494-10064577.html Version: All Version Tested on: DigitALL Xp Version x1 Code : dork :...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...