5058 matches found
CVE-2007-0560
CVE-2007-0560 describes an SQL injection vulnerability in user.asp for ASP EDGE versions 1.2b and earlier, exploitable remotely via the user parameter. The flaw allows an attacker to inject arbitrary SQL commands, potentially impacting confidentiality and integrity and enabling partial availabili...
CVE-2007-0566
CVE-2007-0566 is an SQL injection in news_detail.asp for ASP NEWS 3 and earlier, exploitable via the id parameter. Affected component is the news_detail.asp handler; root cause is unsafely concatenated SQL in input handling. Impact is arbitrary SQL execution with high severity (base score 7.5). P...
CVE-2007-0566: Undefined Security Weakness
SQL injection vulnerability in newsdetail.asp in ASP NEWS 3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
AdMentor (banners) admin SQL injection
AdMentor banners admin SQL injection By : sn0oPy Risk : high Site : http://www.aspcode.net/products/admentor Dork : inurl:"admentor/admin" exploit : UserID = 'or' '=' Password = 'or' '=' contact : [email protected] greetz : subzero, Avg Teamhttp://forums.avenir-geopolitique.net. references :...
CVE-2007-0590: Undefined Security Weakness
Cross-site scripting XSS vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web script or HTML via the palavra parameter...
CVE-2007-0560: Undefined Security Weakness
SQL injection vulnerability in user.asp in ASP EDGE 1.2b and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter...
RBL - ASP (scripts with db) SQL injection
RBL - ASP scripts with db SQL injection By : sn0oPy Risk : high Site : http://www.aspside.com Dork : intitle:"RBL - ASP" exploit : user = 'or' '=' pass = 'or' '=' contact : [email protected] greetz : subzero, Avg Teamhttp://forums.avenir-geopolitique.net reference =...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
PHP and ASP upload vulnerability explore-exploit warning-the black bar safety net
1 pass exploit the principles just for the form format of the upload of asp and php scripts ncnetcat For the submission packet the dos interface to run under: nc-vv www.. com 8 01.txt -vv: echo 8 0: the www port 1.txt: is your data packet to be transmitted use of more methods, please check this...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
AdMentor (banners) admin SQL injection
AdMentor banners admin SQL injection By : sn0oPy Risk : high Site : http://www.aspcode.net/products/admentor Dork : inurl:"admentor/admin" exploit : UserID = 'or' '=' Password = 'or' '=' contact : [email protected] greetz : subzero, Avg Teamhttp://forums.avenir-geopolitique.net. references :...
ASP News News_Detail.ASP SQL注入漏洞
ASP NEWS是一款基于ASP的WEB应用程序。 ASP NEWS不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'NewsDetail.ASP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 ASP NEWS 3 目前没有详细解决方案提供： http://www.planetgraphic.de/...
aspedge12b-sql.txt
Title : ASP EDGE = V1.2b user.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://aspedge.cjb.net || http://www.planetsourcecode.com/vb/scripts/ShowCode.asp?txtCodeId=7530&lngWId=4 $$ : Free SQL---------------------------------------------------------...
ASP Edge User.ASP SQL注入漏洞
ASP EDGE是一款基于ASP的WEB应用程序。 ASP EDGE不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'User.ASP'脚本对用户提交的'user'参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 ASP EDGE 1.2b 目前没有详细解决方案提供： http://www.planetsourcecode.com/vb/scripts/ShowCode.asp?txtCodeId=7530&lngWId=4...
aspnews3-sql.txt
Title : ASP NEWS = V3 newsdetail.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.planetgraphic.de/ SQL--------------------------------------------------------- http://target/path//newsdetail.asp?id=SQL Example:...
ASP EDGE <= 1.2b (user.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : ASP EDGE = V1.2b user.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://aspedge.cjb.net || http://www.planetsourcecode.com/vb/scripts/ShowCode.asp?txtCodeId=7530&lngWId=4 $$ : Free...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
ASP NEWS <= v3 (news_detail.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : ASP NEWS = V3 newsdetail.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.planetgraphic.de/ SQL--------------------------------------------------------- http://target/path//newsdetail.asp?id=SQL Example:...
ASP EDGE <= V1.2b (user.asp) Remote SQL Injection Vulnerability
Title : ASP EDGE = V1.2b user.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://aspedge.cjb.net || http://www.planetsourcecode.com/vb/scripts/ShowCode.asp?txtCodeId=7530&lngWId=4 $$ : Free SQL---------------------------------------------------------...