CVE-2008-6382

ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb...

CVE-2008-6382

ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb...

CVE-2008-6382

CVE-2008-6382 affects ASP Portal 3.2.5, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to directly request ASPPortal.mdb and download the database file. The fixed details (affected versions, root cause, exploitation, and remediatio...

Sql injection

SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter...

CVE-2008-6353

SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter...

CVE-2008-6353

SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter...

CVE-2008-6353

CVE-2008-6353 describes an SQL injection vulnerability in ASP-CMS 1.0, specifically in index.asp, exploitable via the cha parameter. The underlying issue is untrusted input used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. The NVD data assigns a high impact (base s...

Access2asp imageLibrary Arbitrary ASP Shell Upload Vulnerability

Exploit for unknown platform in category web applications ================================================================ Access2asp imageLibrary Arbitrary ASP Shell Upload Vulnerability ================================================================ + Title: imageLibrary dork...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Cetera CMS: crossite scripting...

CVE-2008-6382: Undefined Security Weakness

ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb...

CVE-2008-6353: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter...

Access2asp imageLibrary Shell Upload

|| || | || o,7 || . o7 || 4||| ow, : / / . upload shell Found by ::: mr.al7rbi Contact ::: n16 at live.com my Group ::: islam-defenders Team + Title: imageLibrary dork inurl:"defaultImage.asp" + EXPLOITS: http://www.site.com/imageLibrary//admin/images/defaultImage.asp exp:...

CVE-2008-6329

SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters, as reachable from Employee/emplogin.asp. NOTE: some of these details are obtained from third party information...

CVE-2008-6329

SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters, as reachable from Employee/emplogin.asp. NOTE: some of these details are obtained from third party information...

CVE-2008-6329

The CVE-2008-6329 entry concerns a SQL injection vulnerability in Pre ASP Job Board, reported in Employee/login.asp (and reachable from Employee/emp_login.asp). The vulnerability is triggered by the Username and Password parameters, allowing remote attackers to execute arbitrary SQL commands. The...

asp File Download vulnerability-vulnerability warning-the black bar safety net

1:boil the Outlook Const adTypeBinary = 1 FileName = Request. QueryString”FileName” if FileName = “” Then Response. Write “invalid file name!” Response. End End if FileExt = MidFileName, InStrRevFileName, “.” + 1 Select Case the UCaseFileExt Case “ASP”, “ASA”, “aspX”, “ASAX”, “MDB” Response. Writ...

CVE-2008-6329: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters, as reachable from Employee/emplogin.asp. NOTE: some of these details are obtained from third party information...

BannerManager 0.81 SQL Injection

SISTEMA DE BANNER: BannerManager v0.81 http://sourceforge.net/projects/bannermanager -------------------------------------- vulnerable: sql injection : Found by: rootzig -------------------------------------- Greetz: Eviwrite :P ------------------- -----------------------------------------...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Drupal: Crossite scripting. E107: crossite scripting...