Lucene search
+L

5058 matches found

exploitpack
exploitpack
•added 2006/11/25 12:00 a.m.•19 views

ASP-Nuke Community 1.5 - Cookie Privilege Escalation

ASP-Nuke Community 1.5 - Cookie Privilege Escalation Title : ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo , pseudo = Login UserName ASPNUKE14%5Fpseudoid , pseudoid = UserI...

1AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/11/25 12:00 a.m.•48 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

1.5AI score
SaveExploits0References16Affected Software9
securityvulns
securityvulns
•added 2006/11/25 12:00 a.m.•269 views

[Aria-Security Team] MidiCart ASP Shopping Cart SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://www.aria-security.com/forum/showthread.php?t=42 ----------------------------------------------------------- Software: MidiCart ASP Shopping Cart Method: SQL Injection And Cro...

1.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/11/25 12:00 a.m.•114 views

[Aria-Security Team] MidiCart ASP Plus Shopping Cart SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian ----------------------------------------------------------- Software: MidiCart ASP Plus Shopping Cart Method: SQL Injection And Cross Site Scripting PoC: http://target/path/itemshow.asp?codeno=SQL...

1.4AI score
SaveExploits0
zdt
zdt
•added 2006/11/25 12:00 a.m.•31 views

ASP-Nuke Community <= 1.5 Cookie Privilege Escalation Vulnerability

Exploit for unknown platform in category web applications =================================================================== ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo ...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/11/25 12:00 a.m.•54 views

[Aria-Security Team] ASP ListPics 5.0 SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://www.aria-security.com/forum/showthread.php?t=41 ----------------------------------------------------------- Software: ASP ListPics 5.0 Method: SQL Injection PoC:...

2AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/11/25 12:00 a.m.•46 views

ASP-Nuke Community 1.5 - Cookie Privilege Escalation

Title : ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo , pseudo = Login UserName ASPNUKE14%5Fpseudoid , pseudoid = UserId ASPNUKE14%5Femail , email = User Email Save and go ...

8.5CVSS5.8AI score0.02622EPSS
SaveExploits1
CVE
CVE
•added 2006/11/24 6:00 p.m.•72 views

CVE-2006-6089

CVE-2006-6089 corresponds to multiple cross-site scripting (XSS) vulnerabilities in BaalAsp forum’s addpost1.asp. The flaws allow remote attackers to inject arbitrary script or HTML via the title/Subject, groupname/Group Name, or detail/Message fields. The affected software is BaalAsp forum (addp...

4.3CVSS6AI score0.01313EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2006/11/24 6:00 p.m.•40 views

CVE-2006-6089

Multiple cross-site scripting XSS vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject arbitrary web script or HTML via the 1 title Subject, 2 groupname Group Name, or 3 detail Message field...

5.8AI score0.01313EPSS
SaveExploits0References7
NVD
NVD
•added 2006/11/24 5:07 p.m.•36 views

CVE-2006-6075

Cross-site scripting XSS vulnerability in addpost1.asp in BaalAsp forum allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

6.8CVSS5.6AI score0.0113EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2006/11/24 12:00 a.m.•16 views

PT-2006-6734 · Baalasp · Baalasp Forum

Name of the Vulnerable Software and Affected Versions: BaalAsp forum affected versions not specified Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the addpost1.asp file of the BaalAsp forum. These vulnerabilities allow remote attackers to inject arbitrary we...

4.3CVSS5.7AI score0.01313EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/11/24 12:00 a.m.•7 views

CVE-2006-6089: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject arbitrary web script or HTML via the 1 title Subject, 2 groupname Group Name, or 3 detail Message field...

4.3CVSS5.9AI score0.01313EPSS
SaveExploits0References1
exploitpack
exploitpack
•added 2006/11/24 12:00 a.m.•17 views

ASP ListPics 5.0 - Listpics.asp SQL Injection

ASP ListPics 5.0 - Listpics.asp SQL Injection source: https://www.securityfocus.com/bid/21279/info ASP ListPics is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

8.6AI score
SaveExploits0
exploitpack
exploitpack
•added 2006/11/24 12:00 a.m.•18 views

MidiCart ASP - Item_Show.asp?ID2006quant SQL Injection

MidiCart ASP - ItemShow.asp?ID2006quant SQL Injection source: https://www.securityfocus.com/bid/21273/info MidiCart ASP is prone to an SQL injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacke...

0.3AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/11/24 12:00 a.m.•5 views

CVE-2006-6075: Undefined Security Weakness

Cross-site scripting XSS vulnerability in addpost1.asp in BaalAsp forum allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

6.8CVSS6AI score0.0113EPSS
SaveExploits0References1
Exploit DB
Exploit DB
•added 2006/11/24 12:00 a.m.•26 views

ASP ListPics 5.0 - 'Listpics.asp' SQL Injection

source: https://www.securityfocus.com/bid/21279/info ASP ListPics is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

7.5CVSS5.8AI score0.01237EPSS
SaveExploits2
Exploit DB
Exploit DB
•added 2006/11/24 12:00 a.m.•225 views

MidiCart ASP - 'Item_Show.asp?ID2006quant' SQL Injection

source: https://www.securityfocus.com/bid/21273/info MidiCart ASP is prone to an SQL injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data...

7.5CVSS5.8AI score0.01394EPSS
SaveExploits2
seebug.org
seebug.org
•added 2006/11/23 12:00 a.m.•29 views

fipsGallery &lt;= 1.5 (index1.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : fipsGallery = v1.5 index1.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : 29 Euro http://target/path//index1.asp?what=artists&which=SQL Example:...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/11/23 12:00 a.m.•47 views

Daily web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

1.5AI score
SaveExploits0References2Affected Software2
seebug.org
seebug.org
•added 2006/11/23 12:00 a.m.•24 views

fipsForum &lt;= 2.6 (default2.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : fipsForum = v2.6 default2.asp Remote SQL Injection Vulnerability Author : ajann Contact : : http://target/path//default2.asp?kat=SQL Example: //default2.asp?kat=-1%20union%20select%200,pwadmin%20from%20config """"""""""""""""""""" ajann,Turkey ... Im not...

7.1AI score
SaveExploits0
Rows per page
Query Builder