5058 matches found
CVE-2005-2624
Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaintargument parameter to 1 calculator.asp or 2 cpaintfile.asp, which is directly fed into an eval statement...
CVE-2005-2624
Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaintargument parameter to 1 calculator.asp or 2 cpaintfile.asp, which is directly fed into an eval statement...
CVE-2005-2624: Undefined Security Weakness
Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaintargument parameter to 1 calculator.asp or 2 cpaintfile.asp, which is directly fed into an eval statement...
CVE-2004-2411
The CVE-2004-2411 entry concerns VP-ASP Shopping Cart versions 4.0–5.0 where the CleanseMessage function in shop$db.asp does not adequately sanitize inputs. This permits remote XSS attacks that do not rely on traditional [removed] tags, demonstrated via javascript in IMG tags affecting the cat pa...
CVE-2004-2413
CVE-2004-2413 : A SQL injection vulnerability affects VP-ASP Shopping Cart versions 4.0 through 5.0. The flaw allows remote attackers to execute arbitrary SQL commands via the POST parameters (Processed0 and Processed1) to shopproductselect.asp. This vulnerability could lead to partial confidenti...
CVE-2004-2411
The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting XSS attacks that do not use tags, as demonstrated via javascript in IMG tags to 1 the cat parameter in...
CVE-2004-2412
Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart 4.0 through 5.0 allow remote attackers to execute arbitrary SQL commands via the catalogid parameter in 1 shopreviewlist.asp and 2 shopreviewadd.asp...
CVE-2004-2413
SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL commands via the 1 Processed0 and 2 Processed1 parameters in a POST request to shopproductselect.asp...
CVE-2004-2412
CVE-2004-2412 involves VP-ASP Shopping Cart 4.0–5.0 with SQL injection vulnerabilities in the catalogid parameter of the two endpoints, shopreviewlist.asp and shopreviewadd.asp . The vulnerability enables remote attackers to execute arbitrary SQL commands against the underlying database, as state...
ASP-Nuke <= 0.80 多个跨站脚本(CSS/XSS)漏洞
BUGTRAQ: 14062 ASPNuke中存在多个跨站脚本漏洞，起因是没有正确的过滤用户输入。在/module/account/register/forgotpassword.asp第33行和103行代码中： ? ... sEmail = steForm Email ... TR TD class= forml % steTxt E-Mail % reqBR INPUT TYPE= text NAME= email VALUE= %= sEmail % SIZE= 22 MAXLENGTH= 80 class= form /TD /TR TR ... ?...
CVE-2004-2412: Undefined Security Weakness
Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart 4.0 through 5.0 allow remote attackers to execute arbitrary SQL commands via the catalogid parameter in 1 shopreviewlist.asp and 2 shopreviewadd.asp...
CVE-2004-2411: Undefined Security Weakness
The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting XSS attacks that do not use...
CVE-2004-2413: Undefined Security Weakness
SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL commands via the 1 Processed0 and 2 Processed1 parameters in a POST request to shopproductselect.asp...
[SA16462] CPAINT Ajax Toolkit Unspecified Command Execution Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
ASP-Nuke <= 0.80 comment_post.asp远程SQL注入漏洞
ASPNuke中存在SQL注入漏洞，远程攻击者可以利用此漏洞非授权访问数据库。 起因是没有正确的过滤用户输入。请看/module/support/task/commentpost.asp的第36行和第75行代码： ... nTaskID = steNForm TaskID ... If sErrorMsg = Then prevent dup posting here sStat = SELECT TaskID & FROM tblTaskComment & WHERE TaskID = & nTaskID & & AND Subject = & ReplacesSubject, , &...
CVE-2005-2613: Undefined Security Weakness
Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or read files via unknown vectors...
ASP-Nuke RC2 存在跨站脚本(CSS/XSS)执行漏洞
BugCVE: CAN-2002-0521 BUGTRAQ: 4477 ASP-Nuke是一款基于WEB的系统架构程序，运行在多种Unix和Linux系统下，也可运行于Windows平台下。 ASP-Nuke对用户输入过滤上存在漏洞，可使远程攻击者利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。 ASP-Nuke中的downloads.asp和post.asp在处理用户提供的输入没有过滤相关的脚本代码，攻击者可以构建包含恶意脚本代码的内容提交给连接，当其他用户浏览相关此连接的时候，脚本将在用户的浏览器中执行。攻击者可能借此得到用户基于Cookie的认证信 ASP-Nuke RC2...
ASP-Nuke RC1-RC2 用户资料页面跨站脚本(CSS/XSS)执行漏洞
BugCVE: CAN-2002-0521 BUGTRAQ: 4481 ASP-Nuke对用户输入过滤上存在漏洞，可使远程攻击者利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。 ASP-Nuke中的用户资料页面处理用户输入时没有充分过滤相关Javascript代码，攻击者可以在任意用户资料字段处输入恶意脚本代码，当其他用户浏览相关信息的时候，脚本将在用户的浏览器中执行。攻击者可能借此得到用户基于Cookie的认证信息。 ASP-Nuke RC1-RC2 厂商补丁： ASP-Nuke --------...
ASP-Nuke RC1-RC2 明文Cookie认证信息导致任意访问漏洞
BugCVE: CAN-2002-0522 BUGTRAQ: 4484 ASP-Nuke中Cookie存在设计问题，可导致攻击者以任意用户访问应用系统。 ASP-Nuke使用Cookie进行认证，当用户使用Cookie时，Cookie以非加密形式存储在本地系统上，攻击者可以通过修改Cookie信息，导致以任意用户权限访问ASP-Nuke系统，包括以管理员帐户权限访问。 ASP-Nuke RC1-RC2 厂商补丁： ASP-Nuke -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...