Virtual Programming VP-ASP 4.00/5.00 - 'shopsearch.asp' SQL Injection

source: https://www.securityfocus.com/bid/9133/info It has been reported that VP-ASP may be prone to a SQL injection vulnerability that may allow an attacker to disclose sensitive information by supplying malicious SQL code to the underlying database. The problem exists in the 'shopsearch.asp'...

Virtual Programming VP-ASP 4.00/5.00 - 'shopdisplayproducts.asp' SQL Injection

source: https://www.securityfocus.com/bid/9134/info It has been reported that VP-ASP may be prone to a SQL injection vulnerability that may allow an attacker to disclose sensitive information by supplying malicious SQL code to the underlying database. The problem exists in the...

Web Wiz Forums ver. 7.01

Informations : °°°°°°°°°°°° Language : ASP Bugged Version : Web Wiz Forums ver. 7.01 and less ? Website : http://www.webwizforums.com Problems : Permanent XSS Objects : °°°°°°° - registernewuser.asp - register.asp The values variable are not filtered: strLocation = Request.Form"location" strMessa...

[Full-Disclosure] SQL Injections in VieNuke

This ASP Portal/Forum, http://www.vienuke.com, is a nest of SQL Injections... ... the first thing I have tried http://www.vienuke.com/vie/viewtopic.asp?forumid=48&id=2736' :- Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html...

Web Wiz Forums ver. 7.01

Informations : °°°°°°°°°°°° Language : ASP Bugged Version : Web Wiz Forums ver. 7.01 and less ? Patched version : none Website : http://www.webwizforums.com Problems : Permanent XSS Objects : °°°°°°° - forummembers.asp - members.asp - pmbuddylist.asp Exploits : °°°°°°°°...

Re-Boot Design ASP Forum SQL injection Vulnerability

Re-Boot Design ASP Forum SQL injection Vulnerability Published: 24 September 2003 Released: 24 September 2003 Affected Systems: Re-Boot Design ASP Forum Version 1.01 Vendor: http://www.re-bootd.com Issue: attackers can access users accounts without them knowing their passwords. Description:...

CVE-2003-0560

CVE-2003-0560 concerns an SQL injection in VP-ASP’s shopexd.asp. The vulnerability is triggered via the id parameter, enabling remote attackers to gain administrator privileges. The connected documents confirm the issue and its impact (admin privilege escalation via SQL injection), but do not pro...

CVE-2003-0560

SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter...

ZH2003-4SA (security advisory): ASP-DEV Discussion Forum V2.0

ZH2003-4SA security advisory: ASP-DEV Discussion Forum V2.0 Published: 12/07/2003 Released: 12/07/2003 Name: ASP-DEV Discussion Forum V2.0 Affected Systems: All versions Issue: Remote attackers can obtain users information including passwords Author: [email protected] Description Zone-h Security...

CyberShop-ASP 6.0Fx Vulnerable with shopdbtest.asp

$Indonesia - Security Development Team 2000 - 2003 Advisory Name: CyberShop-ASP 6.0Fx Vulnerable with shopdbtest.asp Release Date: 3:41 PM 7/13/03 Application: CyberShop ASP 6.0Fx Platform: Win32 Severity: High BUG Type: Security leak Author: DrPonidi [email protected] Discover by:...

ASP-DEV Discussion Forum 2.0 - Admin Directory Weak Default Permissions

ASP-DEV Discussion Forum 2.0 - Admin Directory Weak Default Permissions source: https://www.securityfocus.com/bid/8172/info It has been reported that a vulnerability exists in ASP-DEV Discussion Forum that exposes potentially sensitive information. Because of this, an attacker may be able to gain...

ASP-DEV Discussion Forum 2.0 - Admin Directory Weak Default Permissions

source: https://www.securityfocus.com/bid/8172/info It has been reported that a vulnerability exists in ASP-DEV Discussion Forum that exposes potentially sensitive information. Because of this, an attacker may be able to gain access to user credentials. User credentials are stored in the...

Virtual Programming VP-ASP 5.00 - shopexd.asp SQL Injection (1)

Virtual Programming VP-ASP 5.00 - shopexd.asp SQL Injection 1 source: https://www.securityfocus.com/bid/8159/info It has been reported that VP-ASP does not sufficiently sanitize user input passed to the shopexd.asp script contained in the software. As a result, it may be possible for remote...

Virtual Programming VP-ASP 5.00 - shopexd.asp SQL Injection (2)

Virtual Programming VP-ASP 5.00 - shopexd.asp SQL Injection 2 source: https://www.securityfocus.com/bid/8159/info It has been reported that VP-ASP does not sufficiently sanitize user input passed to the shopexd.asp script contained in the software. As a result, it may be possible for remote...

Virtual Programming VP-ASP 5.00 - 'shopexd.asp' SQL Injection (1)

source: https://www.securityfocus.com/bid/8159/info It has been reported that VP-ASP does not sufficiently sanitize user input passed to the shopexd.asp script contained in the software. As a result, it may be possible for remote attackers to embed SQL commands which are to be passed to the...

Virtual Programming VP-ASP 5.00 - 'shopexd.asp' SQL Injection (2)

source: https://www.securityfocus.com/bid/8159/info It has been reported that VP-ASP does not sufficiently sanitize user input passed to the shopexd.asp script contained in the software. As a result, it may be possible for remote attackers to embed SQL commands which are to be passed to the...

VP-ASP shopexd.asp catalogid Parameter SQL Injection

The remote host is using the VP-ASP software suite. This set of CGIs is vulnerable to a SQL injection bug which may allow an attacker to take the control of the server as an administrator. From there, he can obtain the list of customers, steal their credit card information and more. In addition t...

0006_AP.CF-rds-dump.txt

-- ------------------------- -- - AngryPacket Security Advisory - -- ------------------------- -- - +--------------------- -- - + advisory information +------------------ -- - Exploit Code: Victim1 Initial Bug Report By: rs2112 release date: 06/26/2003 +------------------- -- - + timeline of...

CVE-2003-0225

The ASP function Response.AddHeader in Microsoft Internet Information Server IIS 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service memory consumption with an ASP page...

WebStores 2000 browse_item_details.asp SQL Injection

The remote web server is running WebStores 2000, a set of ASP scripts designed to set up an e-commerce store. There is a flaw in the version of WebStores used on the remote host that may allow an attacker to make arbitrary SQL statements to the backend database. An attacker may be able to exploit...