5058 matches found
CVE-2006-3184
Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary ASP code via the strAsgSknPageBgColour parameter to settingsskin.asp, which is stored in incskinfile.asp...
CVE-2006-3184
The vulnerability CVE-2006-3184 affects the ASP Stats Generator prior to 2.1.2. It is a Direct static code injection vulnerability in which the strAsgSknPageBgColour parameter to settings_skin.asp, stored in inc_skin_file.asp, can allow remote authenticated attackers to execute arbitrary ASP code...
BDPDT for DotNetNuke (.net nuke) uploadfilepopup.aspx File Upload Privilege Escalation
The remote host contains BDPDT, a database abstraction layer used in various add-on modules for DotNetNuke. The installed version of the BDPDT contains an ASP.NET script that allows an unauthenticated attacker to gain control of the affected host by allowing uploading arbitrary files with the...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
CVE-2006-3184: Undefined Security Weakness
Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary ASP code via the strAsgSknPageBgColour parameter to settingsskin.asp, which is stored in incskinfile.asp...
CVE-2006-3188: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 maingroup and 2 secondgroup parameters to a searchprodlist.asp, and the 3 maingroup parameter to b meny2.asp. NOTE: the provenance of this information is...
CVE-2006-3187: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 maingroup and 2 secondgroup parameters to a searchprodlist.asp, and the 3 maingroup parameter to b meny2.asp. NOTE: it is possible that this ...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
ASP Stats Generator <= 2.1.1 SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== ASP Stats Generator = 2.1.1 SQL Injection Vulnerabilities ========================================================== /------------------------------------------------ IHS Public...
ASP Stats Generator <= 2.1.1 SQL Injection Vulnerabilities
No description provided by source. /------------------------------------------------ IHS Public advisory -------------------------------------------------/ ASP Stats Generator SQL-ASP injection - Code Excution ASP Stats Generator is a powerful website counter, completely written in ASP programmin...
ASP Stats Generator 2.1.1 - SQL Injection
ASP Stats Generator 2.1.1 - SQL Injection /------------------------------------------------ IHS Public advisory -------------------------------------------------/ ASP Stats Generator SQL-ASP injection - Code Excution ASP Stats Generator is a powerful website counter, completely written in ASP...
ASP Stats Generator 2.1.1 - SQL Injection
/------------------------------------------------ IHS Public advisory -------------------------------------------------/ ASP Stats Generator SQL-ASP injection - Code Excution ASP Stats Generator is a powerful website counter, completely written in ASP programming language. The application is able...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
CVE-2006-3032
Multiple cross-site scripting XSS vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 trial, allow remote attackers to inject arbitrary web script or HTML via the 1 catname and 2 total parameters in a displaypic.asp, and the 3 catname parameter in b displaythumbs.asp...
CVE-2006-3032
Multiple cross-site scripting XSS vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 trial, allow remote attackers to inject arbitrary web script or HTML via the 1 catname and 2 total parameters in a displaypic.asp, and the 3 catname parameter in b displaythumbs.asp...
CVE-2006-3032
CVE-2006-3032 describes multiple cross-site scripting (XSS) vulnerabilities in Xtreme ASP Photo Gallery, affecting versions 1.05 and earlier (and possibly 2.0 trial). The XSS can be triggered via the parameters (1) catname and (2) total in displaypic.asp, and (3) catname in displaythumbs.asp, all...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...