Lucene search
+L

37 matches found

Cvelist
Cvelist
•added 2009/03/02 4:00 p.m.•40 views

CVE-2008-6353

SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter...

8.4AI score0.00973EPSS
SaveExploits2References3
CVE
CVE
•added 2009/03/02 4:00 p.m.•63 views

CVE-2008-6353

CVE-2008-6353 describes an SQL injection vulnerability in ASP-CMS 1.0, specifically in index.asp, exploitable via the cha parameter. The underlying issue is untrusted input used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. The NVD data assigns a high impact (base s...

7.5CVSS6.6AI score0.00973EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/03/02 12:00 a.m.•5 views

CVE-2008-6353: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter...

7.5CVSS6.4AI score0.00973EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2008/12/31 12:00 a.m.•26 views

Zagros ASP CMS Database Disclosure

--------------------------------------------------------- Portal Name: Zagros ASP cms Vendor : http://www.zagros.co.ir Author : PouyaServer , [email protected] Vulnerability : db.mdb Database Disclosure Vulnerability --------------------------------------------------------- DD:...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2008/12/14 12:00 a.m.•131 views

ASP-CMS v.1.0 Sql Injection/Database Disclosure

ASP-CMS v.1.0 Sql Injection/Database Disclosure AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

1.2AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/12/13 12:00 a.m.•20 views

ASP-CMS 1.0 (index.asp cha) SQL Injection Vulnerability

No description provided by source. ASP-CMS v.1.0 Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/12/12 12:00 a.m.•62 views

ASP-CMS 1.0 - 'cha' SQL Injection

ASP-CMS v.1.0 Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download : http://puzzle.dl.sourceforge.net/sourceforge/asp-cms/asp-cms.18-12-04.zip DORK...

7.5CVSS5.8AI score0.00973EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2008/12/12 12:00 a.m.•27 views

ASP CMS 1.0 SQL Injection / Database Disclosure

ASP-CMS v.1.0 Sql Injection/Database Disclosure AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

SaveExploits0
zdt
zdt
•added 2008/12/12 12:00 a.m.•34 views

ASP-CMS 1.0 (index.asp cha) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= ASP-CMS 1.0 index.asp cha SQL Injection Vulnerability ======================================================= ASP-CMS v.1.0 Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Download :...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/12/12 12:00 a.m.•17 views

ASP-CMS 1.0 - cha SQL Injection

ASP-CMS 1.0 - cha SQL Injection ASP-CMS v.1.0 Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

0.7AI score
SaveExploits0
Prion
Prion
•added 2007/10/06 5:17 p.m.•22 views

Improper access control

ASP-CMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request for mdb-database/ASP-CMSv100.mdb...

5CVSS7.1AI score0.01064EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2007/10/06 5:17 p.m.•23 views

CVE-2007-5260

ASP-CMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request for mdb-database/ASP-CMSv100.mdb...

5CVSS6.5AI score0.01064EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2007/10/06 5:00 p.m.•32 views

CVE-2007-5260

ASP-CMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request for mdb-database/ASP-CMSv100.mdb...

6.5AI score0.01064EPSS
SaveExploits0References2
CVE
CVE
•added 2007/10/06 5:00 p.m.•47 views

CVE-2007-5260

ASP-CMS 1.0 stores sensitive information under the web root with insufficient access control, allowing remote attackers to download the database (mdb-database/ASP-CMS_v100.mdb) containing usernames and passwords. The available sources describe this exposure but do not provide exploitation steps o...

5CVSS5.9AI score0.01064EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/06 12:00 a.m.•4 views

CVE-2007-5260: Undefined Security Weakness

ASP-CMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request for mdb-database/ASP-CMSv100.mdb...

5CVSS5.8AI score0.01064EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2007/10/03 12:00 a.m.•24 views

aspcms-mdb.txt

ASP-CMS version 1 default password location. http://asp-cms.sourceforge.net/ A vulnerability exists within the content management system ASP-CMS that allows a remote user to see the username and password of the content management system itsself. the user/pass combo along with all the other settin...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2007/10/02 12:00 a.m.•41 views

ASP-CMS version 1 default password location.

ASP-CMS version 1 default password location. http://asp-cms.sourceforge.net/ A vulnerability exists within the content management system ASP-CMS that allows a remote user to see the username and password of the content management system itsself. the user/pass combo along with all the other settin...

1.4AI score
SaveExploits0
Rows per page
Query Builder