CVE-2006-1353

Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the downloadid parameter in downloadclick.asp and 2 contentID parameter in news/NewsItem.asp; authenticated administrators can also conduct attacks via 3 userid...

CVE-2006-1353: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the downloadid parameter in downloadclick.asp and 2 contentID parameter in news/NewsItem.asp; authenticated administrators can also conduct attacks via 3 userid...

ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities

--Security Report-- Advisory: ASPPortal = 3.1.1 Multiple Remote SQL Injection Vulnerabilities --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 20/03/06 11:14 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: ASPPortal...

[SA19286] ASPPortal "downloadid" SQL Injection Vulnerability

TITLE: ASPPortal "downloadid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19286 VERIFY ADVISORY: http://secunia.com/advisories/19286/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: ASP Portal 3.x http://secunia.com/product/8725/ DESCRIPTION: nukedx...

ASPPortal <= 3.1.1 (downloadid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ ASPPortal use IO::Socket; use Math::BigInt; if@ARGV != 3 usage; else exploit; sub header print "\n- NukedX Security Advisory Nr.2006-21\r\n"; print "- ASPPortal \r\n"; print "- -...

ASPPortal 3.1.1 - downloadid SQL Injection

ASPPortal 3.1.1 - downloadid SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=21 Usage: aspp.pl use IO::Socket; use Math::BigInt; if@ARGV != 3 usage; else...

ASPPortal &lt;= 3.1.1 (downloadid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=21 Usage: aspp.pl host path user use IO::Socket; use Math::BigInt; if@ARGV != 3 usage;...

ASPPortal 3.1.1 - 'downloadid' SQL Injection

!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=21 Usage: aspp.pl use IO::Socket; use Math::BigInt; if@ARGV != 3 usage; else exploit; sub header print "\n- NukedX Securit...

Sql injection

Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-1261

Multiple cross-site scripting XSS vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-1262

Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors...

CVE-2006-1262

Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors...

CVE-2006-1261

CVE-2006-1261 affects ASPPortal 3.00 and is described as multiple cross-site scripting (XSS) vulnerabilities allowing remote injection of arbitrary script or HTML via unknown attack vectors. Connected documents corroborate the XSS issue and indicate the vulnerability has a CVSSv2 base score of 4....

CVE-2006-1261

Multiple cross-site scripting XSS vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-1262

ASPPortal 3.00 is indicated to have multiple SQL injection vulnerabilities; the CVE entry and linked records state unknown impact and attack vectors. The provided documents do not supply concrete details such as vulnerable parameters, affected versions beyond 3.00, exploit information, or remedia...

CVE-2006-1262: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors...

CVE-2006-1261: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...