chernobiLe Portal 1.0 - default.asp SQL Injection

chernobiLe Portal 1.0 - default.asp SQL Injection Title : chernobiLe Portal 1.0 default.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$ : Not Free,Private Info : / Turk Script Eklememen konusunda guzelce uyarmistim,ukalaca tamam demistin Fakat hala birsey bulmus gibi bazi...

CVE-2006-6932: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to a dispimage.asp, or the 2 order or 3 page parameter to b default.asp...

CVE-2006-6927

Multiple SQL injection vulnerabilities in Rialto 1.6 allow remote attackers to execute arbitrary SQL commands via 1 the uname username and 2 pword passwd fields in a admin/default.asp; the 3 ID parameter to b listfull.asp or c printmain.asp; the 4 cat parameter to d listmain.asp, e...

CVE-2006-6927: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Rialto 1.6 allow remote attackers to execute arbitrary SQL commands via 1 the uname username and 2 pword passwd fields in a admin/default.asp; the 3 ID parameter to b listfull.asp or c printmain.asp; the 4 cat parameter to d listmain.asp, e...

CVE-2006-6828: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the grup parameter in admin.asp, or the id parameter in 2 default.asp or 3 admin.asp. NOTE: The provenance of this information is unknown; the details are obtained...

CVE-2006-6794: Undefined Security Weakness

SQL injection vulnerability in default.asp in Efkan Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the grup parameter...

CVE-2006-6768

Multiple cross-site scripting XSS vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the 1 cat or 2 main parameter...

CVE-2006-6768

The CVE-2006-6768 entry documents multiple XSS vulnerabilities in the default.asp page of PWP Technologies The Classified Ad System, exploitable via the (1) cat and (2) main parameters. The underlying issue is cross-site scripting in input handling on that page, with a CVSS base score of 6.8 (Med...

efkanforum10-sql.txt

LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : Efkan Forum v1.0 Script Download : http://maxiasp.com/scyorum.asp?scno=797 Risk : High Found By : ShaFuck31 Thanks : | Dekolax | The RéD | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | UNiKnoX | Vulnerable file :...

CVE-2006-6768: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the 1 cat or 2 main parameter...

CVE-2006-6582: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 membersusername user and 2 memberspassword password fields in a login action in members/default.asp, and 3 the Search box. NOTE: som...

CVE-2006-6455

Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1, and possibly DUdirectory Pro and Pro SQL 3.x, allow remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password parameter. NOTE: some of these details are obtained from third party...

CVE-2006-6455

CVE-2006-6455 affects DUware DUdirectory 3.1 (and possibly DUdirectory Pro/Pro SQL 3.x). The vulnerability is multiple SQL injections in admin/default.asp that allow remote attackers to execute arbitrary SQL via the Username or Password parameters. This entry derives from third‑party information ...

CVE-2006-6455: Undefined Security Weakness

Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1, and possibly DUdirectory Pro and Pro SQL 3.x, allow remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password parameter. NOTE: some of these details are obtained from third party...

CVE-2006-6355

CVE-2006-6355 describes an SQL injection in DUware DUclassmate (default.asp via the iCity parameter; iState is covered by CVE-2005-2049). The issue arises from inadequate input sanitization, allowing remote attackers to execute arbitrary SQL commands. Connected sources corroborate the vulnerabili...

CVE-2006-6355: Undefined Security Weakness

SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL commands via the iCity parameter. NOTE: the iState parameter is already covered by CVE-2005-2049...

CVE-2006-6181

Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbitrary SQL commands via the 1 AlphaSort, 2 In, and 3 orderby parameters...

CVE-2006-6181

CVE-2006-6181 refers to multiple SQL injection vulnerabilities in default.asp of ClickTech ClickContact. The issue allows remote attackers to execute arbitrary SQL commands via the (1) AlphaSort, (2) In, and (3) orderby parameters, indicating a failure to sanitize user input in query construction...

CVE-2006-6181: Undefined Security Weakness

Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbitrary SQL commands via the 1 AlphaSort, 2 In, and 3 orderby parameters...

ASP-Nuke Community 1.5 - Cookie Privilege Escalation

Title : ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo , pseudo = Login UserName ASPNUKE14%5Fpseudoid , pseudoid = UserId ASPNUKE14%5Femail , email = User Email Save and go ...