PHP, ASP, CGI web applications security vulnerabilities

No description provided...

[SA16135] Hitachi Groupmax Form and Web Workflow Server Set Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

sqlChinese.txt

I found a vulnerability in a webcounter quite spread in China, I was not able to retrieve its name if someone could help.... You can find examples of this webcounter by searching for "StatDay.asp" hourly statistics for a given day, "StatMonth.asp" daily statistics for a given month or...

Hosting Controller Software Detection

The remote host is running Hosting Controller, a commercial web-hosting automation suite for the Windows Server family platform. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid19254; scriptversion"1.15"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Hosting...

SQL Injection in Chinese ASP Webcounter

I found a vulnerability in a webcounter quite spread in China, I was not able to retrieve its name if someone could help.... You can find examples of this webcounter by searching for "StatDay.asp" hourly statistics for a given day, "StatMonth.asp" daily statistics for a given month or...

VP-ASP Multiple Script SQL Injection

The remote host is using the VP-ASP, a shopping cart program written in ASP. The remote version of this software contains three SQL injection vulnerabilities in the files shopaddtocart.asp, shopaddtocartnodb.asp and shopproductselect.asp. An attacker may exploit these flaws to execute arbitrary S...

VP-ASP Multiple Script SQL Injection (2)

Binary data 3086.prm...

[SA16104] VP-ASP Shopping Cart SQL Injection Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

PHP, ASP, CGI web applications security vulnerabilities

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CVE-2002-2073

Cross-site scripting XSS vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 ctr parameter in Default.asp and 2 the query string to formslogin.asp...

CVE-2001-1550

CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users...

CVE-2001-1550: Undefined Security Weakness

CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users...

ASPinline.txt

--Alt-Boundary-17597.19317787 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Content-description: Mail message body Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL injection : ASP Inline Corporate Calendar Risk: Medium Th...

PT-2005-3153 · Microsoft · Asp.Net

Name of the Vulnerable Software and Affected Versions: Microsoft ASP.NET affected versions not specified Description: The issue allows remote attackers to cause a denial of service by consuming CPU resources due to an infinite loop. This is achieved by sending a crafted SOAP message to an...

CVE-2004-2164

VP-ASP 5.0 is affected by CVE-2004-2164 due to shoprestoreorder.asp not closing the database connection after restoring a previous order, enabling potential denial of service via resource exhaustion. The available sources describe the impact as a connection consumption issue but do not provide co...

CVE-2004-2164

shoprestoreorder.asp in VP-ASP 5.0 does not close the database connection when a user restores a previous order, which allows remote attackers to cause a denial of service connection consumption...

CVE-2004-2164: Undefined Security Weakness

shoprestoreorder.asp in VP-ASP 5.0 does not close the database connection when a user restores a previous order, which allows remote attackers to cause a denial of service connection consumption...

CVE-2005-2064

Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web script or HTML via the 1 email parameter to forgotpassword.asp, or the 2 FirstName, 3 LastName, 4 Username, 5 Password, 6 Address1, 7 Address2, 8 City, 9 ZipCode, 10 Email parameter to...

CVE-2005-2066

SQL injection vulnerability in commentpost.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL statements via the TaskID parameter...

CVE-2005-2065

HTTP response splitting vulnerability in languageselect.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web caches via CRLF "%0d%0a" sequences in the LangCode parameter...