CVE-2009-2024

Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt...

CVE-2009-2024

Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt...

CVE-2009-2024

CVE-2009-2024 affects Vlad Titarenko ASP VT Auth 1.0. The vulnerability arises from storing sensitive information under the web root with insufficient access control, allowing remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt....

CVE-2009-2024: Undefined Security Weakness

Vlad Titarenko ASP VT Auth 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file and obtain usernames and passwords via a direct request for zHk8dEes3.txt...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Blue Collar Productions iGallery 4.1 Plus File Download

Vendor Notified: 05/25/2009 Vulnerability Details: ------------------------------------------- Blue Collar Productions iGallery 4.1 Plus http://www.b-cp.com/igallery/default.asp is a commercial photo gallery script written in Classic ASP. There exists also a free version named iGallery 3.4. The...

ASP Football Pool 2.3 Database Disclosure

!/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--, ,--' / \ \ / / WWW.C4TEAM.ORG '/ '...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

ASP Football Pool 2.3 Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== ASP Football Pool 2.3 Remote Database Disclosure Vulnerability ============================================================== !/usr/bin/perl ASP Football Pool v2.3 Script : ASP...

ASP Football Pool 2.3 - Remote Database Disclosure

ASP Football Pool 2.3 - Remote Database Disclosure !/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ;...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. myPHPNuke: SQL injection...

ASP Football Pool 2.3 Remote Database Disclosure Vulnerability

No description provided by source. !/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--,...

Micro's Articles system v1. 5 1 vulnerability-vulnerability warning-the black bar safety net

This system previously it was analysed today see with the updated version so download the back to see The previous vulnerability is up, but new holes came a is upload vulnerability A is background injection The first says that transfer in /manage/video/upfilesoft. asp does not contain the...

ASP Football Pool 2.3 - Remote Database Disclosure

!/usr/bin/perl ASP Football Pool v2.3 Script : ASP Football Pool v2.3 Demo : http://brainjar.com/AspFootballPool/demo1 Download : http://www.brainjar.com/AspFootballPool/download/AspFootballPool2.3.zip .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--, ,--' / \ \ / / WWW.C4TEAM.ORG '/ '...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. myPHPNuke: crossite scripting, SQL injection...

dvbbs delete the upload. inc after the shell was a method-vulnerability warning-the black bar safety net

dvbbs delete the upload. inc after the shell was a method - the premise is to give the front Desk administrative privileges Into the background after Go to the user management Just change the personal e-mail address for %eval requestchr3 5%@163.com After saving Find the mail list export Then expo...

DMXReady Registration Manager 1.1 0day-vulnerability warning-the black bar safety net

Play first before watching this because this travertine according to this hole again to dig - in! http://www.milw0rm.com/exploits/8705 GoogleHack inurl:incwebblogmanager. asp Then browse/includes/sharedscripts/wysiwygeditor/assetmanager/assetmanager. asp Create a new xxx. asp directory the back...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. myPHPNuke: SQL injection, crossite scripting. PostNuke: SQL injection...

ASP Inline Corporate Calendar (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. + Script : ASP Talk + Exploit Type : Multiple Exploits SQL/CSS + Google Dork : intitle:"ASP inline corporate calendar" inurl:.asp?id= + Contact : blackbeard-sql A.T hotmail.fr --//-- Exploit : 1Cross site scripting :...