CVE-2006-6210

The vulnerability CVE-2006-6210 affects ASP ListPics 5.0. Affected component: listpics.asp. Root cause: SQL injection via the ID parameter, allowing remote attackers to execute arbitrary SQL commands. Impact described as arbitrary SQL execution; no exploitation details or mitigations provided in ...

CVE-2006-6209

Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 id2006quant parameter to a itemshow.asp, or the 2 maingroup or 3 secondgroup parameter to b itemlist.asp. NOTE: the codeno parameter t...

CVE-2006-6210: Undefined Security Weakness

SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CVE-2006-6209: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers to execute arbitrary SQL commands via the 1 id2006quant parameter to a itemshow.asp, or the 2 maingroup or 3 secondgroup parameter to b itemlist.asp. NOTE: the codeno parameter t...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

aria-midicart.txt

Aria-Security Team Advisory Original Advisory : http://www.aria-security.com/forum/showthread.php?t=42 ----------------------------------------------------------- Software: MidiCart ASP Shopping Cart Method: SQL Injection And Cross Site Scripting PoC: http://target/path/itemshow.asp?codeno=SQL...

MidiCart ASP Item_Show.ASP ID2006quant SQL注入漏洞

MidiCart ASP是一款基于ASP的WEB应用程序。 MidiCart ASP不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'ItemShow.ASP'脚本对用户提交的'ID2006quant'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 MidiCart Software MidiCart ASP Plus 0 MidiCart Software MidiCart ASP http://www.midicart.com/index.html...

aria-asplistpics.txt

Aria-Security Team Advisory Original Advisory : http://www.aria-security.com/forum/showthread.php?t=41 ----------------------------------------------------------- Software: ASP ListPics 5.0 Method: SQL Injection PoC: http://target/path/listpics.asp?a=show&ID=SQL INJECTION Contact:...

ASP ListPics Listpics.ASP SQL注入漏洞

ASP ListPics是一款基于ASP的WEB应用程序。 ASP ListPics不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Listpics.ASP'脚本对用户提交的'ID'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 ASP ListPics ASP ListPics 5.0 暂无 http://www.example.com/path/listpics.asp?a=show&ID=SQL INJECTION...

JiRo's FAQ Manager Login.ASP SQL注入漏洞

JiRo's FAQ Manager是一款基于ASP的WEB应用程序。 JiRo's FAQ Manager不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Login.ASP'脚本对用户提交的'tid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 JiRos FAQ Manager 1.0 目前没有解决方案提供： http://www.jiros.net/products/product.asp?pID=9...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

apb-rfi.txt

Title : Active PHP Bookmarks apb.php Remote file include Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://lbstone.com/apb/downloads/apb-1.1.02.zip Affected software description : Application : Active PHP...

CVE-2006-6117

CVE-2006-6117 is a SQL injection vulnerability in the index1.asp component of fipsGallery 1.5 and earlier. It allows remote attackers to inject arbitrary SQL commands via the irrelevant-parameter named “which”, potentially compromising data through the affected page. The CVSS2 base score is 7.5 (...

CVE-2006-6117

SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the which parameter...

Again break ray client figure ASP webmaster Safety assistant-vulnerability warning-the black bar safety net

Lake2 last in the evil eighth fight, even to put yourself to create the Black anti-ultimatefree killASP Trojan with his ray client figure ASP webmasters security aides tear-kill some, and ultimately of course I win it, the result of course is to successfully“marry”got Lake2 a ASP Trojan, however,...

ASP-Nuke Community <= 1.5 Cookie Privilege Escalation Vulnerability

No description provided by source. Title : ASP-Nuke Community = v1.5 Cookie Modification Privilege Escalation Vulnerability Author : ajann S.Page : http://www.rot.dk D.Page : http://www.rot.dk/aspnuke/downloads.asp Greetz : Nukedx Cookie ---------- Open the Cookie Editor= Find cookie informations...

CVE-2006-6117: Undefined Security Weakness

SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the which parameter...

CVE-2006-6116: Undefined Security Weakness

SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the kat parameter...