[Aria-Security Team] MidiCart ASP Shopping Cart SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://www.aria-security.com/forum/showthread.php?t=42 ----------------------------------------------------------- Software: MidiCart ASP Shopping Cart Method: SQL Injection And Cro...

[Aria-Security Team] ASP ListPics 5.0 SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://www.aria-security.com/forum/showthread.php?t=41 ----------------------------------------------------------- Software: ASP ListPics 5.0 Method: SQL Injection PoC:...

CVE-2006-6089

CVE-2006-6089 corresponds to multiple cross-site scripting (XSS) vulnerabilities in BaalAsp forum’s addpost1.asp. The flaws allow remote attackers to inject arbitrary script or HTML via the title/Subject, groupname/Group Name, or detail/Message fields. The affected software is BaalAsp forum (addp...

CVE-2006-6089

Multiple cross-site scripting XSS vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject arbitrary web script or HTML via the 1 title Subject, 2 groupname Group Name, or 3 detail Message field...

CVE-2006-6075

Cross-site scripting XSS vulnerability in addpost1.asp in BaalAsp forum allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

MidiCart ASP - Item_Show.asp?ID2006quant SQL Injection

MidiCart ASP - ItemShow.asp?ID2006quant SQL Injection source: https://www.securityfocus.com/bid/21273/info MidiCart ASP is prone to an SQL injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacke...

ASP ListPics 5.0 - Listpics.asp SQL Injection

ASP ListPics 5.0 - Listpics.asp SQL Injection source: https://www.securityfocus.com/bid/21279/info ASP ListPics is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

PT-2006-6734 · Baalasp · Baalasp Forum

Name of the Vulnerable Software and Affected Versions: BaalAsp forum affected versions not specified Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the addpost1.asp file of the BaalAsp forum. These vulnerabilities allow remote attackers to inject arbitrary we...

ASP ListPics 5.0 - 'Listpics.asp' SQL Injection

source: https://www.securityfocus.com/bid/21279/info ASP ListPics is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

MidiCart ASP - 'Item_Show.asp?ID2006quant' SQL Injection

source: https://www.securityfocus.com/bid/21273/info MidiCart ASP is prone to an SQL injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data...

fipsGallery <= 1.5 (index1.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : fipsGallery = v1.5 index1.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : 29 Euro http://target/path//index1.asp?what=artists&which=SQL Example:...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

fipsForum <= 2.6 (default2.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : fipsForum = v2.6 default2.asp Remote SQL Injection Vulnerability Author : ajann Contact : : http://target/path//default2.asp?kat=SQL Example: //default2.asp?kat=-1%20union%20select%200,pwadmin%20from%20config """"""""""""""""""""" ajann,Turkey ... Im not...

CVE-2006-6070

SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute arbitrary SQL commands via the StateCode parameter...

CVE-2006-6070

SQL injection vulnerability in ASP Nuke 0.80 and earlier (module/account/register/register.asp) allows remote attackers to execute arbitrary SQL via the StateCode parameter. CVSSv2 base score 7.5 (HIGH; NETWORK, LOW access complexity; no authentication; partial confidentiality, integrity, and ava...

CVE-2006-6070

SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute arbitrary SQL commands via the StateCode parameter...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability

Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ASP Nuke...

fipsGallery 1.5 - 'index1.asp' SQL Injection

Title : fipsGallery = v1.5 index1.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : 29 Euro http://target/path//index1.asp?what=artists&which=SQL Example: //index1.asp?what=artists&which=-1%20union%20select%200,username,password%20from%20admin See you Admin Hash...

fipsForum 2.6 - default2.asp SQL Injection

fipsForum 2.6 - default2.asp SQL Injection Title : fipsForum = v2.6 default2.asp Remote SQL Injection Vulnerability Author : ajann Contact : : http://target/path//default2.asp?kat=SQL Example: //default2.asp?kat=-1%20union%20select%200,pwadmin%20from%20config """"""""""""""""""""" ajann,Turkey...