CVE-2008-6739

Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request...

CVE-2008-6739

CVE-2008-6739 affects Todd Woolums ASP Download management script 1.03. The issue is that setupdownload.asp does not require authentication, allowing a remote attacker to obtain administrator privileges via a direct request. The documented impact is elevation to administrator access, with exploit...

CVE-2008-6739: Improper Authentication

Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CVE-2009-1322

ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb...

CVE-2009-1321

Cross-site scripting XSS vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2009-1322

CVE-2009-1322 affects ASP Product Catalog 1.0 where sensitive data is stored under the web root with insufficient access control. An attacker can directly request database/aspProductCatalog.mdb to download a database containing user credentials. The connected records confirm the presence of this ...

CVE-2009-1322

ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb...

CVE-2009-1321

Cross-site scripting XSS vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2009-1321

CVE-2009-1321 is an XSS vulnerability in ASP Product Catalog 1.0's search.asp, exploitable via the keywords parameter to inject arbitrary script/HTML. The issue stems from unsanitized input in the search function, enabling remote attackers to affect victims’ browsers. CVSS 2.0 base score 4.3 (MED...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CVE-2009-1321: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2009-1322: Undefined Security Weakness

ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. VBulletin: crossite scripting...

ASP Product Catalog 1.0 XSS / Disclosure

!/usr/bin/perl By AlpHaNiX NullArea.Net alphaathacker.bz Made in Tunisia script : ASP Product Catalog Multiple Remote Exploits download : http://sourceforge.net/project/showfiles.php?groupid=136315 script homepage : http://aspprocatalog.sourceforge.net/ Vulnerable : XSS : In Search , Example :...

ASP Product Catalog 1.0 (XSS/DD) Multiple Remote Exploits

Exploit for unknown platform in category web applications ========================================================= ASP Product Catalog 1.0 XSS/DD Multiple Remote Exploits ========================================================= !/usr/bin/perl By AlpHaNiX NullArea.Net Made in Tunisia script : AS...

ASP Product Catalog 1.0 - Cross-Site Scripting File Disclosure

ASP Product Catalog 1.0 - Cross-Site Scripting File Disclosure !/usr/bin/perl By AlpHaNiX NullArea.Net alphaathacker.bz Made in Tunisia script : ASP Product Catalog Multiple Remote Exploits download : http://sourceforge.net/project/showfiles.php?groupid=136315 script homepage :...

ASP Product Catalog 1.0 - Cross-Site Scripting / File Disclosure

!/usr/bin/perl By AlpHaNiX NullArea.Net alphaathacker.bz Made in Tunisia script : ASP Product Catalog Multiple Remote Exploits download : http://sourceforge.net/project/showfiles.php?groupid=136315 script homepage : http://aspprocatalog.sourceforge.net/ Vulnerable : XSS : In Search , Example :...