5058 matches found
ASP2PHP 0.76.23 - Preparse Token Variable Buffer Overflow
source: https://www.securityfocus.com/bid/12014/info asp2php is prone to a buffer overflow vulnerability. This issue is exposed when the application is used to convert an ASP file to PHP. The particular issue is related to parsing of tokens in ASP files. Since ASP files may originate from an...
ASP-Rider - SQL Injection
ASP-Rider - SQL Injection source: https://www.securityfocus.com/bid/11933/info A remote SQL injection vulnerability reportedly affects ASP-Rider Web blog. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker m...
Active Server Corner ASP Calendar 1.0 - Administrative Access
Active Server Corner ASP Calendar 1.0 - Administrative Access source: https://www.securityfocus.com/bid/11931/info ASP Calendar is reported prone to an unauthorized administrative access vulnerability. An unauthorized remote attacker can access an administrative script and potentially gain...
ASP-Rider verify.asp username Parameter SQL Injection
The remote host appears to be running ASP-Rider, a set of ASP scripts designed to maintain a blog. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands, which could in turn be used to gain administrative access on the remote host. %NASLMINLEVEL 70300 C...
Active Server Corner ASP Calendar 1.0 - Administrative Access
source: https://www.securityfocus.com/bid/11931/info ASP Calendar is reported prone to an unauthorized administrative access vulnerability. An unauthorized remote attacker can access an administrative script and potentially gain administrative access to the application. It is believed that this...
ASP-Rider - SQL Injection
source: https://www.securityfocus.com/bid/11933/info A remote SQL injection vulnerability reportedly affects ASP-Rider Web blog. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may exploit this issue to...
[SA13137] Infuseum ASP Message Board Unspecified Cross-Site Scripting and SQL Injection
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
dwc_articles possible sql injection
author: l0om site: www.excluded.org product: dwcarticles = 1.6 maybe other versions too problem: possible sql injection Vendor site? www.distinctwebcreations.com note:its currently down. Vendor status? Didnt find an email address or phon number. what is it? DwcArticles is an ASP application...
gosmart.txt
This vulnerability was discovered by Positive Technologies using MaxPatrol www.maxpatrol.com - intellectual professional security scanner. It is able to detect a substantial amount of vulnerabilities not published yet. MaxPatrol's intelligent algorithms are also capable to detect a lot of...
MegaBBS ASP Forum SQL Injection
Binary data 2330.prm...
Password Protect XSS and SQL-Injection vulnerabilities.
CRIOLABS - Software: Password protect - Type: User Authentication - Company: Web Animations - Date: 30-8-2004 Software Software: Password protect Versions: All Languaje: ASP Plataforms: Win nt, 2000, xp Web: http://www.webanimations.com.au/ The ultimate protection including unlimited user names a...
passprotect.txt
CRIOLABS - Software: Password protect - Type: User Authentication - Company: Web Animations - Date: 30-8-2004 Software Software: Password protect Versions: All Languaje: ASP Plataforms: Win nt, 2000, xp Web: http://www.webanimations.com.au/ The ultimate protection including unlimited user names a...
CVE-1999-1189
The CVE-1999-1189 issue affects Netscape Navigator/Communicator 4.7 on Windows 95/98. A buffer overflow can be triggered by a long argument after the ? in a URL referencing .asp, .cgi, .html, or .pl, allowing remote denial of service and potentially arbitrary command execution. No remediation det...
PT-2004-2554 · Unknown · Password Protect
Name of the Vulnerable Software and Affected Versions: Password Protect affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the ShowMsg parameter in...
PT-2004-2553 · Unknown · Password Protect
Name of the Vulnerable Software and Affected Versions: Password Protect affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL statements and bypass authentication. This can be achieved through various parameters and files, including 1 admin or Pas...
ZixForum ZixForum.mdb DIrect Request Database Disclosure
The remote server is running ZixForum, a set of ASP scripts for a web-based forum. This program uses a database named 'ZixForum.mdb' that can be downloaded by any client. This database contains discussions, account information, etc. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Sun Java ASP Server Default Admin Password
Binary data 4575.prm...
Sun-One ASP Server Test Application Detection
Binary data 4546.prm...