Episodex Guestbook Unauthorized Access and HTML Injection Vulnerability

The remote host is running the Episodex Guestbook, a guestbook written in ASP. The remote version of this software contains an input validation flaw leading to the execution on attacker supplied HTML and script code. In addition an unauthenticated remote attacker can directly access administrator...

ASP source using %20 trick

It is possible to get the source code of the remote ASP scripts by appending %20 at the end of the request like GET /default.asp%20 ASP source code usually contains sensitive information such as logins and passwords. OpenVAS Vulnerability Test $Id: aspsourcespace.nasl 8023 2017-12-07 08:36:26Z...

Codebrws.asp Source Disclosure Vulnerability

Microsoft's IIS 5.0 web server is shipped with a set of sample files to demonstrate different features of the ASP language. One of these sample files allows a remote user to view the source of any file in the web root with the extension .asp, .inc, .htm, or .html. OpenVAS Vulnerability Test $Id:...

Snitz Forums 2000 HTTP Response Splitting

The remote host is using Snitz Forums 2000 - an ASP based forum/bbs. There is a bug in this software which makes it vulnerable to HTTP response splitting vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Microsoft IIS 'Codebrws.asp' Source Disclosure Vulnerability - Active Check

Microsoft SPDX-FileCopyrightText: 2002 Matt Moore / HD Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:microsoft:internetinformationservices"; ifdescription...

ASP/PHP '%20' Source Code Disclosure Vulnerability - Active Check

Multiple products are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2002 Michel Arboi SPDX-FileCopyrightText: New code / detection methods since 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

ASP-DEv XM Forum IMG Tag Script Injection Vulnerability

The remote web server contains an ASP script which is vulnerable to a cross site scripting issue. Description : The remote host appears to be running the ASP-DEV XM Forum. There is a flaw in the remote software which may allow anyone to inject arbitrary HTML and script code through the BBCode IMG...

Hosting Controller vulnerable ASP pages

The Hosting Controller application resides on this server. This version is vulnerable to multiple remote exploits. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ASP/ASA source using Microsoft Translate f: bug

There is a serious vulnerability in Windows 2000 unpatched by SP1 that allows an attacker to view ASP/ASA source code instead of a processed file. ASP source code can contain sensitive information such as username's and passwords for ODBC connections. OpenVAS Vulnerability Test $Id: translatef.na...

CactuShop XSS and SQL injection flaws

The remote host runs CactuShop, an e-commerce web application written in ASP. The remote version of this software is vulnerable to cross-site scripting due to a lack of sanitization of user-supplied data in the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be...

AdMentor Login Flaw

AdMentor is a totally free ad rotator script written entirely in ASP. A security vulnerability in the product allows remote attackers to cause the login administration ASP to allow them to enter without knowing any username or password thus bypassing any authentication protection enabled for the...

Comersus Cart /comersus/database/comersus.mdb Direct Request Datbase Disclosure

The remote host appears to be running Comersus Cart, an ASP shopping cart application. The version of Comersus Cart installed on the remote host fails to restrict access to its customer database, which contains order information, passwords, credit card numbers, etc. Further, the data in all...

Comersus BackOffice comersus_backoffice_menu.asp Multiple Parameter SQL Injection

The remote host appears to be running Comersus Cart, an ASP shopping cart application. The version of Comersus Cart installed on the remote host fails to sanitize input to the 'adminName' and 'adminpassword' fields of the 'backofficeLite/comersusbackofficemenu.asp' script before using them in a...

CVE-2005-3422

Cross-site scripting XSS vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter...

CVE-2005-3422

The CVE-2005-3422 entry describes a Cross-site Scripting (XSS) vulnerability in ASP Fast Forum’s error.asp, exploitable by remote attackers via the error parameter to inject arbitrary scripts/HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium), with attack vector Network, authenticatio...

CVE-2005-3422

Cross-site scripting XSS vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter...

[SA17387] ASP Fast Forum "error" Cross-Site Scripting Vulnerability

TITLE: ASP Fast Forum "error" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA17387 VERIFY ADVISORY: http://secunia.com/advisories/17387/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: ASP Fast Forum http://secunia.com/product/6015/ DESCRIPTION:...

Web applications security vulnerabilities (PHP, ASP, CGI, Perl, etc)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

ASP Fast Forum - error.asp Cross-Site Scripting

ASP Fast Forum - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/15233/info ASP Fast Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

WEBSHELL hidden-vulnerability warning-the black bar safety net

1 % if request"shell"="dongxie" then % % end if % Inadded at your shell code Access when you do the hands and feet of the ASP files back plus? shell=dongxie For example:www. dongxie. cn/index. asp? action=dongxie You can tune out the webshell, does not affect the normal browsing. 2 The script is...