CVE-2008-5268

The vulnerability CVE-2008-5268 is an SQL injection in ASPPortal’s content/forums/reply.asp, exploitable via the Topic_Id parameter. It allows remote attackers to execute arbitrary SQL commands. Public exploits exist (e.g., Exploit-DB entry 5775). The NVD entry cites a base score of 7.5 (HIGH) wi...

CVE-2008-5268

SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the TopicId parameter...

CVE-2008-5268: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the TopicId parameter...

ASPPortal Free Version (Topic_Id) Remote SQL Injection Vulnerability

Info: Bug found by Jose Luis Gуngora Fernбndez JosS sys-projectathotmail.com http://www.spanish-hackers.com Spanish Hackers Team - SHT EspSeC & Hack0wn!. Software: ASPPortal Free Version HomePage: http://www.aspportal.net/ Exploit: Remote SQL Injection Vulnerability High Dork: "Powered by...

ASPPortal Free Version (Topic_Id) Remote SQL Injection Vulnerability

No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ ASPPortal Free Version TopicId Remote SQL Injection Vulnerability +==--...

aspportal-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ ASPPortal Free Version TopicId Remote SQL Injection Vulnerability +==-- --==+====================================================================================+==-- - dreaming of necessity is reas...

ASPPortal Free Version - Topic_Id SQL Injection

ASPPortal Free Version - TopicId SQL Injection --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ ASPPortal Free Version TopicId Remote SQL Injection Vulnerability +==--...

ASPPortal Free Version - 'Topic_Id' SQL Injection

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ ASPPortal Free Version TopicId Remote SQL Injection Vulnerability +==-- --==+====================================================================================+==-- - dreaming of necessity is reas...

ASPPortal Free Version (Topic_Id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== ASPPortal Free Version TopicId Remote SQL Injection Vulnerability ==================================================================== + Info: Bug found by JosS EspSeC &...

CVE-2006-5879

SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbitrary SQL commands via the PollID parameter, a different vector than CVE-2006-1353...

CVE-2006-5879

SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbitrary SQL commands via the PollID parameter, a different vector than CVE-2006-1353...

CVE-2006-5879

CVE-2006-5879: SQL injection in ASPPortal 4.0.0 beta and earlier via Poll_ID parameter in default1.asp (remote command execution). Exploitation details are documented in the NVD/CVE records; no remediation details are provided here. The entry is linked to CVE-2006-1353 as a separate vector.

ASPPortal-400.txt

Perl Script Decode: !/usr/bin/perl AspPortal Password Decrypter Get pass exploit.asp and this copy this window Speical Thanks To::: Nukedx ,For ASPPORTAL Decrypter ajann if@1 = 1 exploit; sub decrypt $lp = length$appass; $apkey =...

ASPPortal <= 4.0.0 (default1.asp) Remote SQL Injection Exploit

No description provided by source. % Response.Buffer = True % % On Error Resume Next % % Server.ScriptTimeout = 100 % % '=============================================================================================== 'Script Name: ASPPortal = 4.0.0default1.asp Remote SQL Injection Exploit 'Coded ...

ASPPortal 4.0.0 - 'default1.asp' SQL Injection

exploit1.asp 'Using : Write Target and ID after Submit Click 'Using : Tr:Alýnan Sifreyi Perl scriptinde cözün. 'Using : Tr:Scriptin Tr Dilinde bu exploitle bilgileri alamassiniz,manuel cekebilirsiniz 'Using : Tr:Kimsenin boyle yapicak kadar seviyesiz oldunu düsünmüyorum...

ASPPortal <= 4.0.0 (default1.asp) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== ASPPortal exploit1.asp 'Using : Write Target and ID after Submit Click 'Using : Tr:Al?nan Sifreyi Perl scriptinde c?z?n. 'Using : Tr:Scriptin Tr Dilinde bu exploitle bilgileri...

ASPPortal 4.0.0 - default1.asp SQL Injection

ASPPortal 4.0.0 - default1.asp SQL Injection exploit1.asp 'Using : Write Target and ID after Submit Click 'Using : Tr:Alýnan Sifreyi Perl scriptinde cözün. 'Using : Tr:Scriptin Tr Dilinde bu exploitle bilgileri alamassiniz,manuel cekebilirsiniz 'Using : Tr:Kimsenin boyle yapicak kadar seviyesiz...

Sql injection

Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the downloadid parameter in downloadclick.asp and 2 contentID parameter in news/NewsItem.asp; authenticated administrators can also conduct attacks via 3 userid...

CVE-2006-1353

Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the downloadid parameter in downloadclick.asp and 2 contentID parameter in news/NewsItem.asp; authenticated administrators can also conduct attacks via 3 userid...

CVE-2006-1353

Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the downloadid parameter in downloadclick.asp and 2 contentID parameter in news/NewsItem.asp; authenticated administrators can also conduct attacks via 3 userid...