ASP Forum Script - 'messages.asp?message_id' SQL Injection

source: https://www.securityfocus.com/bid/32571/info ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

CodeToad ASP Shopping Cart Script - Cross-Site Scripting

source: https://www.securityfocus.com/bid/32568/info CodeToad ASP Shopping Cart Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

ASP Forum Script - 'default.asp' Query String Cross-Site Scripting

source: https://www.securityfocus.com/bid/32571/info ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

Pre ASP Job Board - 'emp_login.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32572/info Pre ASP Job Board is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

php and asp use the Shell. Application to program execution-vulnerability warning-the black bar safety net

On the use of the Shell. Application to execute the program in Hai Duong to the top of the asp Trojan is with an example. With ShellExecute this method. Today tried it with the open also can. the php code is as follows, I feel like I haven't in the php webshell to see Related methods ? php $wsh =...

basiccms-disclose.txt

--------------------------------------------------------- Portal Name: Basic-cms ASP D0wn : http://www.basic-cms.com/download-basiccms.zip Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability ---------------------------------------------------------...

BaSiC-CMS (acm2000.mdb) Remote Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Basic-cms ASP D0wn : http://www.basic-cms.com/download-basiccms.zip Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability...

CVE-2008-5274

Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to 1 rss.asp, 2 viewheadings.asp, or 3 viewnews.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-5273

SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter...

Information disclosure

Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to 1 rss.asp, 2 viewheadings.asp, or 3 viewnews.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter...

CVE-2008-5273

The CVE-2008-5273 entry describes an SQL injection vulnerability in viewnews.asp of Todd Woolums ASP News Management 2.2, exploitable via the newsID parameter to execute arbitrary SQL commands remotely. Connected records confirm affected software/version and the underlying cause (unsafely handled...

CVE-2008-5274

CVE-2008-5274 affects Todd Woolums ASP News Management 2.2. The vulnerability allows remote attackers to obtain news items via direct requests to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp). The underlying issue is information disclosure through access to these pages, resulting in par...

CVE-2008-5273

SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter...

CVE-2008-5273: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote attackers to execute arbitrary SQL commands via the newsID parameter...

Basic-CMS - Remote Database Disclosure

Basic-CMS - Remote Database Disclosure --------------------------------------------------------- Portal Name: Basic-cms ASP D0wn : http://www.basic-cms.com/download-basiccms.zip Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability...

CVE-2008-5274: Undefined Security Weakness

Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to 1 rss.asp, 2 viewheadings.asp, or 3 viewnews.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

BaSiC-CMS (acm2000.mdb) Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ BaSiC-CMS acm2000.mdb Remote Database Disclosure Vulnerability ================================================================...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. CoBreeder: Crossite scripting...

Web Calendar System 3.123.30 - Multiple Vulnerabilities

Web Calendar System 3.123.30 - Multiple Vulnerabilities 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0...