CVE-2007-0153

AJLogin 3.5 stores the database (ajlogin.mdb) under the web root with insufficient access control, enabling remote download of passwords. Affected component: ajlogin.mdb handling; root cause: improper access restrictions. Impact: partial confidentiality loss (passwords exposed). Exploitation deta...

CVE-2007-0156

The CVE-2007-0156 entry concerns M-Core where the application stores its database under the web document root, enabling information disclosure if an attacker directly requests db/uyelik.mdb. Affected component: the database file accessed via the web root; root cause: improper placement of the dat...

CVE-2007-0154

CVE-2007-0154 affects Webulas, where sensitive data is stored under the web root with insufficient access control. The issue allows remote attackers to directly request db/db.mdb and download a database containing passwords. The connected sources (NVD/NVD-derived entries) confirm the vulnerabilit...

CVE-2007-0116

Digger Solutions Intranet Open Source IOS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for data/intranet.mdb...

CVE-2007-0089

CVE-2007-0089 concerns jgbbs leaving a sensitive database under the web root with insufficient access control. Remote attackers can retrieve the database file (db/bbs.mdb), exposing passwords via a direct request. The vulnerability stems from inadequate separation between web-accessible content a...

CVE-2007-0096

The CVE-2007-0096 issue affects CarbonCommunities, where sensitive data is stored under the web root with inadequate access control. This allows remote attackers to download a database (DataBase/Carbon2.4d.mdb) via a direct request. The available sources describe the vulnerability in terms of imp...

About the database the simple intrusion and rogue damage-vulnerability warning-the black bar safety net

For domestic and foreign a lot of news, BBS and e-Commerce site using ASP+SQL design, and write an ASP programmer many many have just graduated, so, ASP+SQL attack success rate is relatively high. This type of attack method with the NT version and SQL version is not much relationship, there is no...

CVE-2006-6617

CVE-2006-6617 affects Microsoft Project Server 2003. The vulnerability lies in projectserver/logon/pdsrequest.asp where a GetInitializationData response can expose the UserName and Password fields, allowing remote authenticated users to obtain the MSProjectUser password for the SQL database. The ...

listpics.txt

Title: listpics v5 Author: BLaSTER Contact: [email protected] Script: http://www.aspindir.com/indir.asp?id=2866 //Database Hacked.. http://target/path/Database/.mdb Example: http://victim.com/KhaledMuratList/Database/listpics.mdb // Greetz : BLaCKWHITE, Satanist-imam, EaGLe, FreeZe, LGMAN and...

Evolve Shopping Cart - products.asp SQL Injection

Evolve Shopping Cart - products.asp SQL Injection source: https://www.securityfocus.com/bid/21323/info Evolve Shopping Cart is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

Oracle <= 9i / 10g (read/write/execute) Exploitation Suite

No description provided by source. -- -- $Id: raptororaexec.sql,v 1.2 2006/11/23 23:40:16 raptor Exp $ -- -- raptororaexec.sql - java exploitation suite for oracle -- Copyright c 2006 Marco Ivaldi [email protected] -- -- This is an exploitation suite for Oracle written in Java. Use it to --...

Fixit iDms Pro Image Gallery - filelist.asp Multiple SQL Injections

Fixit iDms Pro Image Gallery - filelist.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21282/info Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly...

vSpin Classified System 2004 - 'cat.asp?catname' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21190/info vSpin Classified System is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues could all...

Grandora Rialto 1.6 - listfull.asp?ID SQL Injection

Grandora Rialto 1.6 - listfull.asp?ID SQL Injection source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...

Grandora Rialto 1.6 - 'printmain.asp?ID' SQL Injection

source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...

Enthrallweb eClassifieds - ad.asp Multiple SQL Injections

Enthrallweb eClassifieds - ad.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21192/info eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues coul...

Enthrallweb eHomes - result.asp Multiple SQL Injections

Enthrallweb eHomes - result.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied inpu...

BestWebApp Dating Site Login Component - Multiple Field SQL Injections

source: https://www.securityfocus.com/bid/21158/info BestWebApp Dating Site is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issues to stea...

Car Site Manager - csmasplistings.asp Multiple SQL Injections

Car Site Manager - csmasplistings.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21066/info Car Site Manager is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues cou...

MGinternet Property Site Manager - admin_login.asp Multiple SQL Injections

MGinternet Property Site Manager - adminlogin.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21073/info MGinternet Property Site Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to...