4712 matches found
CVE-2008-2775
SQL injection vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to execute arbitrary SQL commands via the searchFor parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Play a game of webshell game-bug warning-the black bar safety net
To hack the x-Files cast a draft, two months, and haven't selected, and now it sends to the Just look at it, the article is bad, Don't laugh,the picture is zoom out, tap the picture you can see the big picture. Play a game of webshell game The desertļ¼baiker2008 Now many of the side dishes, speaki...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
AspWebCalendar 2008 Remote File Upload Vulnerability
No description provided by source. Title:AspWebCalendar 2008 Remote File Upload Vulnerability Discovered by : AleminKrali Dork :calendar.asp?eventdetail http://site.com/path/calendaradmin.asp?action=uploadfile == upload your Asp shell http://site.com/path/calendar/eventimages/yourshell.asp == you...
doITlive CMS <= 2.50 (SQL Injection/XSS) Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: doITlive CMS =2.50 SQL Injection/XSS Multiple Vulnerabilities Vendor: www.doitlive.com Vulnerable Version: 2.50 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...
CVE-2008-2764
Cross-site scripting XSS vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors "all fields"...
CVE-2008-2756
Cross-site scripting XSS vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter and other unspecified parameters. NOTE: some of these details are obtained from third party information...
doitlivecms-sqlxss.txt
www.BugReport.ir AmnPardaz Security Research Team Title: doITlive CMS =2.50 SQL Injection/XSS Multiple Vulnerabilities Vendor: www.doitlive.com Vulnerable Version: 2.50 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/43 1. Description: User friend...
doITlive CMS 2.50 - SQL Injection / Cross-Site Scripting
www.BugReport.ir AmnPardaz Security Research Team Title: doITlive CMS =2.50 SQL Injection/XSS Multiple Vulnerabilities Vendor: www.doitlive.com Vulnerable Version: 2.50 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/43 1. Description: User friend...
doITlive CMS <= 2.50 (SQL Injection/XSS) Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: doITlive CMS =2.50 SQL Injection/XSS Multiple Vulnerabilities Vendor: www.doitlive.com Vulnerable Version: 2.50 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...
doITlive CMS <= 2.50 (SQL Injection/XSS) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ================================================================= doITlive CMS = 2.50 SQL Injection/XSS Multiple Vulnerabilities ================================================================= AmnPardaz Security Research Team Title:...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
By FTP for breakthrough IP filtering-vulnerability warning-the black bar safety net
quote site exec "cacls.exe d: /e /t /g everyone:F" msgstr "" put the d drive set to everyone can browse such a export file on the D drive you can download a... quote site exec "regedit-e D:\1.reg HKEYLOCALMACHINE\SYSTEM\ControlSet001\Services\Tcpip" Export Registry in about the TCP/IP Filter of t...
Unfixed XSS vulnerability at www.stegcomputer.ch
Security researcher Trii, has submitted on 16/06/2008 a cross-site-scripting XSS vulnerability affecting www.stegcomputer.ch, which at the time of submission ranked 49795 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is current...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger - information leak, crossite scripting. Simple Machines - crossite scripting...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
ASP Download 1.03 Arbitrary Change Administrator Account Vulnerability
No description provided by source. \ ASPDownload v 1.03 Remote Admin Bypass Exploit / \ / / + Author : Underz0ne Crew + Script : ASPDownload v 1.03 + Risk : High + Script URL : h...
aspdownload-bypass.txt
\ ASPDownload v 1.03 Remote Admin Bypass Exploit / \ / / + Author : Underz0ne Crew + Script : ASPDownload v 1.03 + Risk : High + Script URL : http://www.toddwoolums.com/aspdownload.asp + Dork : Powered by AspDownload --//-- Exploit Area : + Description : The problem is that the script's owner...
Todd Woolums ASP News Management 2.2 SQL Injection Vulnerabiltiy
No description provided by source. |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ \L\ \ | |...