Umbraco Forms 代码问题漏洞

Umbraco Forms is a form builder. A security vulnerability exists in Umbraco Forms version v.8.7.0 that originates from a vulnerability that allows an unauthenticated attacker to execute arbitrary code via a crafted web.config and asp file...

SUSE CVE-2008-2404

Stack-based buffer overflow in the request handling implementation in Sun Java Active Server Pages ASP Server before 4.0.3 allows remote attackers to execute arbitrary code via an unspecified string field...

SUSE CVE-2010-4225

Unspecified vulnerability in the modmono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx ASP.NET applications via unknown vectors related to an "unloading bug."...

CVE-2021-46767

Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leading to a loss of integrity or denial of service...

CVE-2023-20522

Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service...

CVE-2022-32988

Cross Site Scripting XSS vulnerability in router Asus DSL-N14U-B1 1.1.2.3805 via the "list" parameters e.g. filterlwlist, keywordrulelist, etc in every ".asp" page containing a list of stored strings. The following asp files are affected: 1 cgi-bin/APPInstallation.asp, 2...

CVE-2021-44031

An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allow pre-authentication remote code execution. An attacker could upload a .ASP file to reside at /images/GUID/filename...

Solarwinds Kiwi Syslog Server 安全漏洞

Solarwinds Kiwi Syslog Server is an affordable Syslog management tool for network and system engineers from Solarwinds USA. It is used to receive syslog messages and Snmp traps from network devices routers, switches, firewalls, etc. and Linux®/Unix® hosts. A security vulnerability exists in...

Progress Software Telerik UI for ASP.NET AJAX 安全漏洞

Progress Software Telerik UI for ASP.NET AJAX is an HTML editor from Progress Software. A security vulnerability exists in Progress Software Telerik UI for ASP.NET AJAX 2021.1.224, which can be exploited by an attacker to gain unauthorized access to the server and execute code...

Logic flaw vulnerability in old y article management system

The old y article management system is based on the old y Asp Access/Mssql environment developed under the open source website building products . Old y article management system has a logic flaw vulnerability , attackers can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in jianbook a***x.asp Page

jianbook is an ultra-clean online message system, the system is developed by asp + Access, the front-end backend in one. SQL injection vulnerability exists in the jianbook ax.asp page, which can be exploited by attackers to obtain sensitive information from the database...

jianbook has a flawed logic vulnerability

jianbook is an ultra-clean online message system, the system is developed by asp + Access, the front-end backend in one. jianbook has a logic flaw vulnerability that can be exploited by attackers to bypass authentication and obtain administrator privileges...

Code Execution Vulnerability in ZZZcms 1.7.3

zzcms using ASP ACCESS/MSSQL free station building system , all source code open source complete , support the direct use . ZZZcms 1.7.3 there is a code execution vulnerability , attackers can use the vulnerability to inject malicious code...

Code Execution Vulnerabilities in XYCMS Agent Query Authentication System

XYCMS enterprise agent authentication query program system is an asp + access for the development of agent authentication system. XYCMS agent query authentication system there are code execution vulnerabilities, attackers can exploit the vulnerability of code injection to obtain server privileges...

SQL Injection Vulnerability in ZZZCMS Backend

zzcms is an asp language development of the site building system. There is a SQL injection vulnerability in the backend of ZZZCMS, which can be exploited by attackers to obtain sensitive database information...

The vulnerability of the IOleCvt interface in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the IOleCvt interface in Windows operating systems is related to errors in displaying ASP pages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2019-0845

A remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage content, aka 'Windows IOleCvt Interface Remote Code Execution Vulnerability'...

S-CMS Chinese/English Bilingual Decoration Industry Website v3.0 po***.asp page suffers from SQL injection vulnerability

S-CMS Chinese and English bilingual decoration industry website is developed with asp+access, comes with a set of PC templates and a set of WAP templates of Chinese and English bilingual enterprise website system. S-CMS bilingual decoration industry website v3.0po.asp page SQL injection...

S-CMS Hospital Website Builder System has SQL Injection Vulnerability in Frontend

S-CMS hospital station building system is developed by asp+access/mssql, easy to operate, convenient, support PC+mobile+WeChat. There is a SQL injection vulnerability in the frontend of S-CMS Hospital Building System. An attacker can exploit the vulnerability to obtain sensitive information from...

PT-2018-13871 · Telerik · Telerik Extensions For Asp.Net Mvc

Name of the Vulnerable Software and Affected Versions: Telerik Extensions for ASP.NET MVC all versions Description: The issue allows a remote attacker to access files inside the server's web directory because it does not properly restrict access to these files. This product has been obsolete sinc...