4712 matches found
CVE-2006-6209
CVE-2006-6209 concerns multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart. The affected components allow remote attackers to inject arbitrary SQL via the following parameters: (1) id2006quant to item_show.asp, and (2) maingroup or (3) secondgroup to it...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
JiRo's FAQ Manager Login.ASP SQL注入漏洞
JiRo's FAQ Manager是一款基于ASP的WEB应用程序。 JiRo's FAQ Manager不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Login.ASP'脚本对用户提交的'tid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 JiRos FAQ Manager 1.0 目前没有解决方案提供： http://www.jiros.net/products/product.asp?pID=9...
MidiCart ASP Item_Show.ASP ID2006quant SQL注入漏洞
MidiCart ASP是一款基于ASP的WEB应用程序。 MidiCart ASP不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'ItemShow.ASP'脚本对用户提交的'ID2006quant'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 MidiCart Software MidiCart ASP Plus 0 MidiCart Software MidiCart ASP http://www.midicart.com/index.html...
aria-midicart.txt
Aria-Security Team Advisory Original Advisory : http://www.aria-security.com/forum/showthread.php?t=42 ----------------------------------------------------------- Software: MidiCart ASP Shopping Cart Method: SQL Injection And Cross Site Scripting PoC: http://target/path/itemshow.asp?codeno=SQL...
aria-asplistpics.txt
Aria-Security Team Advisory Original Advisory : http://www.aria-security.com/forum/showthread.php?t=41 ----------------------------------------------------------- Software: ASP ListPics 5.0 Method: SQL Injection PoC: http://target/path/listpics.asp?a=show&ID=SQL INJECTION Contact:...
ASP ListPics Listpics.ASP SQL注入漏洞
ASP ListPics是一款基于ASP的WEB应用程序。 ASP ListPics不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Listpics.ASP'脚本对用户提交的'ID'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 ASP ListPics ASP ListPics 5.0 暂无 http://www.example.com/path/listpics.asp?a=show&ID=SQL INJECTION...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
apb-rfi.txt
Title : Active PHP Bookmarks apb.php Remote file include Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://lbstone.com/apb/downloads/apb-1.1.02.zip Affected software description : Application : Active PHP...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
CVE-2006-6117
CVE-2006-6117 is a SQL injection vulnerability in the index1.asp component of fipsGallery 1.5 and earlier. It allows remote attackers to inject arbitrary SQL commands via the irrelevant-parameter named “which”, potentially compromising data through the affected page. The CVSS2 base score is 7.5 (...
CVE-2006-6117
SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the which parameter...
Again break ray client figure ASP webmaster Safety assistant-vulnerability warning-the black bar safety net
Lake2 last in the evil eighth fight, even to put yourself to create the Black anti-ultimatefree killASP Trojan with his ray client figure ASP webmasters security aides tear-kill some, and ultimately of course I win it, the result of course is to successfully“marry”got Lake2 a ASP Trojan, however,...
ASP-Nuke Community <= 1.5 Cookie Privilege Escalation Vulnerability
No description provided by source. Title : ASP-Nuke Community = v1.5 Cookie Modification Privilege Escalation Vulnerability Author : ajann S.Page : http://www.rot.dk D.Page : http://www.rot.dk/aspnuke/downloads.asp Greetz : Nukedx Cookie ---------- Open the Cookie Editor= Find cookie informations...
[Aria-Security Team] MidiCart ASP Plus Shopping Cart SQL Injection
Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian ----------------------------------------------------------- Software: MidiCart ASP Plus Shopping Cart Method: SQL Injection And Cross Site Scripting PoC: http://target/path/itemshow.asp?codeno=SQL...
ASP-Nuke Community <= 1.5 Cookie Privilege Escalation Vulnerability
Exploit for unknown platform in category web applications =================================================================== ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo ...
ASP-Nuke Community 1.5 - Cookie Privilege Escalation
Title : ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo , pseudo = Login UserName ASPNUKE14%5Fpseudoid , pseudoid = UserId ASPNUKE14%5Femail , email = User Email Save and go ...
ASP-Nuke Community 1.5 - Cookie Privilege Escalation
ASP-Nuke Community 1.5 - Cookie Privilege Escalation Title : ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo , pseudo = Login UserName ASPNUKE14%5Fpseudoid , pseudoid = UserI...