5058 matches found
CVE-2006-2807
The CVE-2006-2807 entry concerns ASPwebSoft Speedy Asp Discussion Forum. Affected component: the web application’s profileupdate.asp path where a modified account id and possibly arbitrary values for name, email, country, password, and passwordre can permit a remote attacker to change a user’s pa...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
CVE-2006-2807: Undefined Security Weakness
ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp...
CVE-2006-2794
Hesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other users via a modified id parameter...
Html tag to bring security risks-vulnerability warning-the black bar safety net
BY Kenshin From http://www.loveshell.net The WWW service on the Internet is the most important one of the services, to provide customers with a wide variety of information resources, and to put this information resources organized a very important thing is the Html hypertext Language, and then...
aspWebLinks2.0.txt
AspWebLink 2.0 Remote Admin Pass Change Exploit Administrative Password:Number of Days New:Number of Visits Hot:Links Per Page:input type='text' name=...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
CVE-2006-2773: Undefined Security Weakness
admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook 2.0 does not verify user credentials, which allows remote attackers to edit arbitrary posts via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
ASP Discussion Forum Remote XSS Attack
Hi, I found a vulnerability in ASP Discussion Forum. The vulnerability is a Remote XSS Attack. This is the original Advisory: http://colander.altervista.org/advisory/ASPDisc.txt Let me know if you want to post it up or not. Best Regards, Omni -- Email.it, the professional e-mail, gratis per te:...
ASP Discussion Forum Like the one on FreeVBCode.com Remote XSS Exploit
----------------------------------------------------------------------------- - ASP Discussion Forum Like the one on FreeVBCode.com Remote XSS Exploit - -= http://colander.altervista.org/advisory/ASPDisc.txt =- ----------------------------------------------------------------------------- -= ASP...
aspWebLinks 2.0 - SQL Injection / Admin Pass Change
AspWebLink 2.0 Remote Admin Pass Change Exploit Administrative Password:Number of Days New:Number of Visits Hot:Links Per Page:td wid...
ASP database plug horse small conference-vulnerability warning-the black bar safety net
lake2 （ http://lake2.0x54.org ） With the development of technology, ASP database plug horse also is not what fresh stuff, believe you played this. Oh, and that you have not met insert the asp code is spaces apart case? i.e. insertion of each of the characters between the There are spaces for? Now...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Speedy ASP Forum (profileupdate.asp) User Pass Change Exploit
Exploit for unknown platform in category web applications ============================================================= Speedy ASP Forum profileupdate.asp User Pass Change Exploit ============================================================= Speedy Forum User Pass Change // ajannUser Name :...
SpeedyASPForum.txt
Title : Speedy ASP Forumprofileupdate.asp User Pass Change Exploit Dork : Copyright © ASPwebSoft Author : ajann greetz : Nukedx Code: Save to .htm Pass Change //Coded ajann function islemKontrol ifdocument.InputForm.name.value=="" || document.InputForm.email.value=="" ||...
Speedy ASP Forum - 'profileupdate.asp' User Pass Change
Speedy Forum User Pass Change // ajannUser Name : Example: Surname Name User Mail : Example: [email protected] User Ýd : Example: Ýd:1 Admin User Country : Choose Country Turkey Example: Turkey User Pass /f...
ASPSitem 2.0 - SQL Injection Database Disclosure
ASPSitem 2.0 - SQL Injection Database Disclosure ASPSitem ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on ASPSitem GET - http://victim/ASPSitemDir/Anket.asp?hid=SQL EXAMPLE -...
ASPSitem <= 2.0 Remote (SQL Injection / DB Disclosure) Vulnerabilities
No description provided by source. ASPSitem = 2.0 Multiple Vulnerabilities. Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on ASPSitem = 2.0. Original advisory can be found at: http://www.nukedx.com/?viewdoc=39 SQL injection - GET -...