CVE-2005-1573: Undefined Security Weakness

SQL injection vulnerability in adminlogin.asp for ASP Virtual News Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...

[SA15346] ASP Virtual News Manager "password" SQL Injection Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: ASP Virtual News Manager "password" SQL Injection...

[HSC Security Group] MaxWebPortal - Multiple SQL injection/XSS

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: Maxwebportal 1.3.5 and prior Risk: High MaxWebPortal is probably the most spread ASP based web portal script. I've found multiple XSS and Sql injection that could easily lead to password strealing or porta...

CVE-2005-1573

SQL injection vulnerability in adminlogin.asp for ASP Virtual News Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2005-1481: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Aaron Outpost ASP Inline Corporate Calendar allow remote attackers to execute arbitrary SQL commands via the EventID parameter to 1 defer.asp or 2 details.asp...

CVE-2004-1788

ASP-Nuke 1.3 and earlier stores user credentials under the web document root with insufficient access control. This allows remote attackers to obtain sensitive information via a direct request to main.mdb. The issue is described across multiple sources (NVD/Red Hat/CVE listings) as a vulnerabilit...

CVE-2004-1788

ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb...

CVE-2004-1788: Undefined Security Weakness

ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb...

PHP, ASP, CGI web applications security vulnerabilities

PHP inclusions, SQL injections, directory traversals, crossite scripting, etc...

[HSC Security Group] ASP Inline Corporate Calendar SQL injection

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL injection : ASP Inline Corporate Calendar Risk: Medium The Corporate Calendar is a nice asp script to manage a calendar shared by users. It has been downloaded by thousands people, and it is considered...

MidiCart PHP - 'Item_List.php?SecondGroup' SQL Injection

source: https://www.securityfocus.com/bid/13514/info MidiCart PHP is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data...

[NT] YusASP Web Asset Manager Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[SA15239] ASP Inline Corporate Calendar "Event_ID" SQL Injection

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: ASP Inline Corporate Calendar "EventID" SQL Injection...

ASP Inline Corporate Calendar 3.6.3 - 'Details.asp' SQL Injection

source: https://www.securityfocus.com/bid/13487/info ASP Inline Corporate Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

ASP Inline Corporate Calendar 3.6.3 - 'Defer.asp' SQL Injection

source: https://www.securityfocus.com/bid/13485/info ASP Inline Corporate Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

CVE-2005-1292

Multiple cross-site scripting XSS vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to 1 tellAFriend.asp or 2 addToWishlist.asp, redirect parameter to 3 access.asp or 4 login.asp, message parameter to 5 login.asp or 6...

CVE-2005-1008

Cross-site scripting XSS vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag...

PHP, ASP, CGI web applications security vulnerabilities

PHP inclusions, SQL injections, directory traversals, crossite scripting, etc...

CVE-2005-1292

The CVE-2005-1292 entry describes multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart. The affected component is the CartWIZ ASP Cart web application, with exploitable vectors via the idProduct parameter on tellAFriend.asp and addToWishlist.asp, and via redirect and message pa...

CVE-2005-1291

Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to 1 addToCart.asp or 2 productDetails.asp, the 3 priceFrom, 4 idCategory, or 5 priceTo parameter to searchResults.asp, or 6 the idParentCategory paramet...