SQL Injection Attacks Aimed at Stealing Gaming Credentials, Experts Say

The mass SQL injection attack that has been ongoing for a week or so now is designed mainly to steal credentials for online games and is quite well planned and organized, experts say. The attack, which has been using two specific domains as part of a widespread SQL injection campaign, is targetin...

Cute Editor online editor local include vulnerability xday-vulnerability warning-the black bar safety net

First, the vulnerability description: CuteEditor for ASP. NET is built on an Html Foundation, most easy-to-use, most powerful WYSIWYG Asp. net online editor. CuteEditor can help Asp. net developers to easily on the original text boxTextareacontentincluding text, images and other Html contentfor...

Mass SQL Injection Attack Hits Sites Running IIS

There’s a large-scale attack underway that is targeting Web servers running Microsoft’s IIS software, injecting the sites with a specific malicious script. The attack has compromised tens of thousands of sites already, experts say, and there’s no clear indication of who’s behind the campaign righ...

Microsoft ASP.NET Cross-Site Scripting vulnerability

The host is running Microsoft ASP .NET and is prone to Cross-Site Scripting Vulnerability. OpenVAS Vulnerability Test $Id: gbmsaspdotnetxssvuln.nasl 6519 2017-07-04 14:08:14Z cfischer $ Microsoft ASP.NET Cross-Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Microsoft .NET 'ASP.NET' Cross-Site Scripting vulnerability

The host is running Microsoft .NET and is prone to Cross-Site Scripting Vulnerability. OpenVAS Vulnerability Test $Id: gbmsdotnetxssvuln.nasl 6519 2017-07-04 14:08:14Z cfischer $ Microsoft .NET 'ASP.NET' Cross-Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Microsoft .NET 'ASP.NET' Cross-Site Scripting vulnerability

Microsoft .NET is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft ASP.NET Cross-Site Scripting vulnerability

Microsoft ASP .NET is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft ASP.NET 2.0 InnerHtml属性远程跨站脚本漏洞

CVE ID: CVE-2010-2084 ASP.NET是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统。 大多数ASP.NET控件都是从HtmlContainerControl继承的，而ASP.NET 2.0没有禁止对其设置InnerHtml属性，这可能导致跨站脚本攻击。 Microsoft ASP.NET 2.0 厂商补丁： Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/technet/security/...

Microsoft ASP.NET Application Folder Information Disclosure (MS06-033; CVE-2006-1300)

ASP.NET is a technology that provides a programming model and infrastructure for creating dynamic web applications. ASP.NET is part of the Microsoft .NET Framework. ASP.NET is deployed on the Microsoft Internet Information Server, which treats files with the .aspx extension as ASP.NET files and...

CVE-2010-2085

The default configuration of ASP.NET in Microsoft .NET before 1.1 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting XSS attacks via the VIEWSTATE parameter...

CVE-2010-2088

ASP.NET in Microsoft .NET 3.5 does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting XSS attacks against the form control via the VIEWSTATE parameter...

CVE-2010-2084

Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to an attribute...

Cross site scripting

Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to an attribute...

Cross site scripting

The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting XSS attacks, as demonstrated by the VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project...

CVE-2010-1459

The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting XSS attacks, as demonstrated by the VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project...

Cross site scripting

The default configuration of ASP.NET in Microsoft .NET before 1.1 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting XSS attacks via the VIEWSTATE parameter...

Cross site scripting

ASP.NET in Microsoft .NET 3.5 does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting XSS attacks against the form control via the VIEWSTATE parameter...

CVE-2010-2085

CVE-2010-2085 affects Microsoft .NET / ASP.NET prior to 1.1, where the default EnableViewStateMac is FALSE, allowing remote attackers to perform cross-site scripting via the __VIEWSTATE parameter. This is corroborated by multiple connected sources (Red Hat advisory, OpenVAS entry, and OpenVAS/SSV...

CVE-2010-1459

The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting XSS attacks, as demonstrated by the VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project...

CVE-2010-2084

Microsoft ASP.NET 2.0 does not prevent setting the InnerHtml property on a control that inherits from HtmlContainerControl, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to an attribute...