Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. NetCat CMS: directory traversal, SQL injection...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger: crossite scripting, DoS...

Pre ASP Job Board SQL Injection

PRE Asp Job Board Auth Bypass/DD Multiple Remote Vulns. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com dork: bende bilmiyorum arkadaslar olunca zaten bildiriyorum lutfen sormayIn ý dont know dork. pls you dont...

Pre Simply Gallery SQL Injection

Pre Simple Gallery ASP Script SQL/DD Multiple Remote Vulns. script: http://preproject.com/projectDetail.asp?projectID=213 ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com dork: bende bilmiyorum arkadaslar olunca...

CVE-2008-5693

Ipswitch WSFTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character...

CVE-2008-5693

Ipswitch WSFTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character...

Pre ASP Classifieds Database Disclosure

PRE ASP Classifieds pclasp.mdb Database Disclosure Vuln --------------------------------------------------------- Portal Name: PRE ASP Classifieds Vendor : http://preproject.com/businesslisting.asp Author : PouyaServer , [email protected] Vulnerability : DD...

CVE-2008-5595

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-5605

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the 1 ItemID parameter to classifieds.asp and the 2 ID parameter to Events.asp...

CVE-2008-5608

ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb...

Sql injection

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the 1 ItemID parameter to classifieds.asp and the 2 ID parameter to Events.asp...

Sql injection

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-5595

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-5608

ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb...

CVE-2008-5605

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the 1 ItemID parameter to classifieds.asp and the 2 ID parameter to Events.asp...

CVE-2008-5595

The CVE-2008-5595 entry describes a SQL injection vulnerability in detail.asp of the ASP AutoDealer application. The flaw allows remote attackers to execute arbitrary SQL commands by supplying a crafted ID parameter, enabling access or manipulation of the underlying database as described in the v...

CVE-2008-5608

CVE-2008-5608 affects ASP AutoDealer where sensitive data is stored under the web root and is not properly access-controlled. The underlying issue is direct access to the web-root file auto.mdb, enabling remote attackers to download the database file via a direct request. The available connected ...

CVE-2008-5601

User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users.mdb...

CVE-2008-5605

CVE-2008-5605 concerns multiple SQL injection vulnerabilities in the ASP Portal. The affected components are the pages involved in classifieds.asp (ItemID parameter) and Events.asp (ID parameter). The underlying issue is that user-supplied input is used in SQL without proper validation or paramet...

CVE-2008-5601

CVE-2008-5601 – Normal mode Affected software: User Engine Lite ASP. Vulnerability: The application stores sensitive information under the web root with insufficient access control, allowing remote attackers to download the database file (users.mdb) via a direct request. Impact: Exposure of the d...