CVE-2008-6527

CVE-2008-6527 is a SQL injection vulnerability in GO4I.NET ASP Forum 1.0, specifically in forum.asp via the iFor parameter. Remote attackers can execute arbitrary SQL commands; impact includes partial confidentiality, integrity, and availability with network access and no authentication. Public r...

CVE-2008-6527

SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Invision Power Board: user existance check...

Cross site scripting

Cross-site scripting XSS vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI...

CVE-2008-6500

CVE-2008-6500 describes a cross-site scripting (XSS) vulnerability in the CodeToad ASP Shopping Cart Script. The issue allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI. The primary affected component is the shopping cart script’s handling of q...

CVE-2008-6500

Cross-site scripting XSS vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI...

CVE-2008-6494

ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb...

Improper access control

ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb...

CVE-2008-6494

ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb...

CVE-2008-6494

The CVE-2008-6494 entry concerns ASP User Engine.NET, where sensitive data is stored under the web root with insufficient access control. The underlying issue allows a remote attacker to download the database (users.mdb) by issuing a direct request. This is supported by the NVD description and as...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Microsoft IIS MS03-018 Security Check

A Cross-Site ScriptingXSSvulnerability affecting IIS 4.0, 5.0 and 5.1 involving the error message that SPDX-FileCopyrightText: 2009 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger: DoS against user's account and server...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PHPSlideshow: crossite scripting. Athree CMS: information leak, SQL injection, DoS...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PHPSlideshow: crossite scripting...

trim()vulnerability crack and protection+articles the whole story-vulnerability warning-the black bar safety net

With the following code: % dim name,title name=trimrequest. form"name" password=trimrequest. form"password" if name=""or password="" then response. redirect "error. asp? error=name&name=null" myDSN="DSN=test;uid=test;pwd=test" set cn=server. createobject"adodb. connection" cn. open myDSN...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

ASP code encrypt hide webshell-vulnerability warning-the black bar safety net

In order to your webshell and more covert! The following will tell you how the ASP code encryption! First of all ASP code is generally plain text, very few encryption, MS have a tool Script Encoder can be encrypted, this stuff can be the official Microsoft site for free download, and there are...

Improper access control

ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb...