Aryadad CMS SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...

Sql injection

SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via the PageID parameter...

CVE-2012-0935

CVE-2012-0935 describes a SQL injection vulnerability in Aryadad CMS, exploitable via the PageID parameter in Default.aspx. The issue allows remote attackers to execute arbitrary SQL commands, with impact per the NVD vector: AV:N/AC:L/Au:N/C:P/I:P/A:P, base score 7.5 (HIGH). Public references (Ex...

BPTSoft Web Solution Group SQL Injection

HUT CNIS Exploit Title: BPTSoft Web Solution Group SQL INJECTION Vulnerability Date: 2012/1/1 Author: S.Azadi Google Dork: site:.ir intext:Copyright 2005-2009 BPTSoft Web Solution Group Vulnerability Type: SQL Injection Version: 2005-2009...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SmarterTools SmarterStats 6.2.4100 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Default.aspx and certain other files...

Kisanji Cross Site Scripting

|=----=----=----=----=----=--------=| | | /\ /\ \ /\ /\ \ everythin's black | //\ /\ \ \L\ \ \ \ \ no turning back | \ \ \ \ \ Default.aspx Cross Site Scripting |Author :Bl4ck.Viper |Vendor :http://kisanji.sourceforge.net/ |Email :[email protected] |Dork :Powered by Kisanji.org...

Sitecore CMS 'default.aspx' XSS

The remote host is running a version of Sitecore CMS that is reportedly affected by a cross-site scripting vulnerability. An attacker could exploit this to inject arbitrary HTML or script code into a user's browser to be executed within the security context of the affected site. %NASLMINLEVEL 703...

Code injection

The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving 1 Admin/frmSite.aspx, 2 Admin/frmSites.aspx, 3 Admin/frmViewReports.aspx, 4...

CVE-2010-3465

Multiple cross-site scripting XSS vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to Default.aspx and the 2 type parameter to SearchResults.aspx...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to Default.aspx and the 2 type parameter to SearchResults.aspx...

CVE-2010-3465

Multiple cross-site scripting XSS vulnerabilities in XSE Shopping Cart 1.5.2.1 and 1.5.3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to Default.aspx and the 2 type parameter to SearchResults.aspx...

CVE-2008-6644

Cross-site scripting XSS vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2008-6380

CVE-2008-6380 affects Active Web Helpdesk 2.0: SQL injection in default.aspx via the CategoryID parameter that allows remote execution of arbitrary SQL commands. The vulnerability is described in multiple sources (NVD/NVD listing, CVE records). Affected component is the web application code handl...

Unfixed XSS vulnerability at www.spyfaidate.it

Security researcher Mystick, has submitted on 19/02/2009 a cross-site-scripting XSS vulnerability affecting www.spyfaidate.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2009. It is currently...

Sql injection

SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQL commands via the 1 id parameter in the "page" page and 2 txtSearch parameter in the "Search" page...

CVE-2008-4364

CVE-2008-4364 describes a SQL injection in ParsaGostar ParsaWeb CMS. The vulnerability affects the default.aspx page, allowing remote attackers to execute arbitrary SQL via the id parameter on the “page” page and the txtSearch parameter on the “Search” page. The associated connected documents con...

DotNetNuke Default.aspx跨站脚本漏洞

BUGTRAQ ID: 29437 DotNetNuke（DNN）是免费的开源内容管理系统。 DotNetNuke的Default.aspx页面没有正确地过滤用户通过URL提交的输入，远程攻击者可以提交恶意URL请求执行跨站脚本攻击。 0 DotNetNuke 4.8.3 DotNetNuke ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： a href=http://www.dotnetnuke.com/ target=blankhttp://www.dotnetnuke.com//a...

Unfixed XSS vulnerability at www4.shu.edu.cn

Security researcher DerickTham, has submitted on 21/12/2007 a cross-site-scripting XSS vulnerability affecting www4.shu.edu.cn, which at the time of submission ranked 26657 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/01/2008. It is...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO query string in "every main page," as demonstrated by default.asp...

CVE-2007-2555

Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a META HTTP-EQUIV Set-cookie expression in the id parameter, related to "cookie manipulation." NOTE: this issue might be cross-site scripting XSS...