KrM Haber Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : LionTurk.Turkblog.com Resmi Web Sitem :D...

JobPost SQL Injection Vulnerability

Exploit for asp platform in category web applications =================================== JobPost SQL Injection Vulnerability =================================== vendor :http://www.aspsiteware.com/job.asp Author:Sid3^effects Code :...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Sql injection

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter...

Directory traversal

Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to determine the existence of arbitrary files via directory traversal sequences in the client's DNS hostname aka the REMOTEHOST variable, related t...

CVE-2010-1588

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter...

CVE-2010-1590

Cross-site scripting XSS vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to inject arbitrary web script or HTML via the client's DNS hostname aka the REMOTEHOST variable, related to the CookielessGenerateFilename an...

CVE-2010-1588

CVE-2010-1588 affects Rocksalt International VP-ASP Shopping Cart (version 6.50 and earlier). The vulnerability is a SQL injection in the Getwebsess function (shopsessionsubs.asp) that allows an attacker to modify the websess parameter to execute arbitrary SQL commands. Impact is described as par...

CVE-2010-1590

CVE-2010-1590 is an XSS vulnerability affecting Rocksalt International VP-ASP Shopping Cart (version 6.50 and earlier), exploitable via the REMOTE_HOST DNS hostname. The issue is tied to the CookielessGenerateFilename and CookielessReadFile functions, allowing remote attackers to inject arbitrary...

CVE-2010-1588

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter...

CVE-2010-1589

The CVE-2010-1589 entry concerns Rocksalt International VP-ASP Shopping Cart, version 6.50 and earlier, with a directory traversal vulnerability in shopsessionsubs.asp. The issue arises from manipulation of the REMOTE_HOST (DNS hostname) variable, linked to CookielessGenerateFilename and Cookiele...

CVE-2010-1590: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to inject arbitrary web script or HTML via the client's DNS hostname aka the REMOTEHOST variable, related to the CookielessGenerateFilename an...

CVE-2010-1588: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter...

CVE-2010-1589: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier might allow remote attackers to determine the existence of arbitrary files via directory traversal sequences in the client's DNS hostname aka the REMOTEHOST variable, related t...

WebEssence 1.0.2 Cross Site Scripting / SQL Injection

WebEssence 1.0.2 Multiple Vulnerabilities Bugs found by whitesheep, R00TATI and epicfail for Debug|Track session @ Backtrack|italia community conference www.backtrack.it XSS PoC: http://localhost/webessence/webessence/oembed.php?url=http://google.com&id=alert'Backtrack|it'; In "url" variable is...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

WebEssence 1.0.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================= WebEssence 1.0.2 Multiple Vulnerabilities ========================================= WebEssence 1.0.2 Multiple Vulnerabilities XSS PoC:...

webessence 1.0.2 - Multiple Vulnerabilities

webessence 1.0.2 - Multiple Vulnerabilities WebEssence 1.0.2 Multiple Vulnerabilities Bugs found by whitesheep, r00t and epicfail for Debug|Track session @ Backtrack|italia community conference www.backtrack.it XSS PoC:...

webessence 1.0.2 - Multiple Vulnerabilities

WebEssence 1.0.2 Multiple Vulnerabilities Bugs found by whitesheep, r00t and epicfail for Debug|Track session @ Backtrack|italia community conference www.backtrack.it XSS PoC: http://localhost/webessence/webessence/oembed.php?url=http://google.com&id=alert'Backtrack|it'; In "url" variable is...

Mihao8 CMS Cross Site Scripting

Title:Mihao8 CMS Multiple XSS Vulnerabilities Author£ºriuskskȪ¸ç Blog£ºhttp://riusksk.blogbus.com Data£º2010-4-23 =====================================================0x1======================================================================...