Pre ASP Classifieds Database Disclosure

PRE ASP Classifieds pclasp.mdb Database Disclosure Vuln --------------------------------------------------------- Portal Name: PRE ASP Classifieds Vendor : http://preproject.com/businesslisting.asp Author : PouyaServer , [email protected] Vulnerability : DD...

CVE-2008-5608

ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb...

CVE-2008-5605

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the 1 ItemID parameter to classifieds.asp and the 2 ID parameter to Events.asp...

CVE-2008-5595

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Sql injection

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Sql injection

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the 1 ItemID parameter to classifieds.asp and the 2 ID parameter to Events.asp...

CVE-2008-5605

CVE-2008-5605 concerns multiple SQL injection vulnerabilities in the ASP Portal. The affected components are the pages involved in classifieds.asp (ItemID parameter) and Events.asp (ID parameter). The underlying issue is that user-supplied input is used in SQL without proper validation or paramet...

CVE-2008-5605

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the 1 ItemID parameter to classifieds.asp and the 2 ID parameter to Events.asp...

CVE-2008-5608

CVE-2008-5608 affects ASP AutoDealer where sensitive data is stored under the web root and is not properly access-controlled. The underlying issue is direct access to the web-root file auto.mdb, enabling remote attackers to download the database file via a direct request. The available connected ...

CVE-2008-5601

User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users.mdb...

CVE-2008-5601

CVE-2008-5601 – Normal mode Affected software: User Engine Lite ASP. Vulnerability: The application stores sensitive information under the web root with insufficient access control, allowing remote attackers to download the database file (users.mdb) via a direct request. Impact: Exposure of the d...

CVE-2008-5595

The CVE-2008-5595 entry describes a SQL injection vulnerability in detail.asp of the ASP AutoDealer application. The flaw allows remote attackers to execute arbitrary SQL commands by supplying a crafted ID parameter, enabling access or manipulation of the underlying database as described in the v...

CVE-2008-5608

ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb...

CVE-2008-5595

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-5605: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the 1 ItemID parameter to classifieds.asp and the 2 ID parameter to Events.asp...

CVE-2008-5601: Undefined Security Weakness

User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users.mdb...

CVE-2008-5595: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-5608: Undefined Security Weakness

ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb...

CARateMySite Database Disclosure

--------------------------------------------------------- Portal Name: CARateMySite Download : http://www.truecontent.info/codeavalanche/asp-rating-script.php Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...

CodeAvalanche Articles (CAArticles.mdb) Database Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================ CodeAvalanche Articles CAArticles.mdb Database Disclosure Vuln ================================================================...