Active Auction Pro 7.1 - 'default.asp?catid' SQL Injection

Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

ActiveBuyandSell 6.2 - 'buyersend.asp?catid' SQL Injection

Title : Active BuyandSell Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactivebuyandsell Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=8 Vuln. Username :...

Active Photo Gallery (default.asp catid) SQL Injection Vulnerability

No description provided by source. Title : Active Photo Gallery Remote SQL Injection Vulnerability Author : CyberGhost My Web Site : http://aspspider.org/cgsecurity Demo Page : http://www.activewebsoftwares.com/demoactivephotogallery Script Page :...

RE: MSIE7 browser entrapment vulnerability (probably Firefox, too)

Tested on Opera 9.20 build 8713 with JRE 1.5 resulting in the following behaviour: After loading the initial site http://lcamtuf.coredump.cx/ietrap/ I couldn't navigate away to google.com etc, however Opera correctly displayed http://lcamtuf.coredump.cx/ietrap/ in the address bar, thus no real...

getID3 library and Audio, Mediafield - arbitrary code execution

The getID3 library used by Audio and Mediafield contains a directory with scripts demonstrating use of the library. These scripts allow any visitor to browse the filesystem, read and delete files or write to zero-byte files or files with an mp3 extension. These actions are only limited by the...

PollMentor 2.0 (pollmentorres.asp id) SQL Injection Vulnerability

No description provided by source. XxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxX X X X Author : SaO X X Site : wWw.SaoHackStyLe.cOm X X Contact : By.SaOatHotmaildotcom X X X X X XxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxX Script : PollMentor v2.0 Download : http://www.aspindir.com/indir.asp?id=4406 Dem...

Hunkaray Duyuru Scripti (tr) Remote SQL Injection Exploit

No description provided by source. Hunkaray Duyuru Scripti tr == SQL Injection Vulnerability Author : cl24zy - DrEgHoT - TuF4N Site : www.hacklive.org , www.illegal-attack.org Contact: [email protected] Download H?y Duyuru Scripti tr : http://www.aspindir.com/Goster/4678 Demo :...

Hunkaray Duyuru Scripti (tr) == SQL Injection Vulnerability

Hunkaray Duyuru Scripti tr == SQL Injection Vulnerability Author : cl24zy - DrEgHoT - TuF4N Site : www.hacklive.org , www.illegal-attack.org Contact: [email protected] Download Hunkaray Duyuru Scripti tr : http://www.aspindir.com/Goster/4678 Demo : http://b.1asphost.com/hunkaray/duyuru Exploit;...

Fullaspsite Asp Hosting Sitesi (tr) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Fullaspsite Asp Hosting Sitesi tr SQL Injection Vulnerability =============================================================== Fullaspsite Asp Hosting tr == SQL Injection...

mpsw-rfi.txt

magic photo storage website -- Remote File Inclusion Vendor : http://www.scriptaty.net/magic-photo-storage-website.html Demo Site : http://www.turnkeydemos.info/demo/picstorage/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; commonfunction.php bug...

PPC Search Engine 1.61 - INC Multiple Remote File Inclusions

PPC Search Engine 1.61 - INC Multiple Remote File Inclusions ============================ HItamputih Crew ==================== hitamputih Advisory Discovered By : IbnuSina ----------------------------------------------------------- script demo: http://www.hyper-scripts.com/demo/ppc/ Risk : very...

PPC Search Engine 1.61 (INC) Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ========================================================================= PPC Search Engine 1.61 INC Multiple Remote File Include Vulnerabilities =========================================================================...

Magic Photo Storage Website - _config[site_path] File Inclusion

Magic Photo Storage Website - configsitepath File Inclusion magic photo storage website -- Remote File Inclusion Vendor : http://www.scriptaty.net/magic-photo-storage-website.html Demo Site : http://www.turnkeydemos.info/demo/picstorage/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesi...

Magic Photo Storage Website - '_config[site_path]' File Inclusion

magic photo storage website -- Remote File Inclusion Vendor : http://www.scriptaty.net/magic-photo-storage-website.html Demo Site : http://www.turnkeydemos.info/demo/picstorage/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; commonfunction.php bug...

Tencent QQ multiple remote overflow vulnerabilities demo-vulnerability warning-the black bar safety net

The following is demo ! /Article/UploadPic/2007-1/200714105438199.jpg ! /Article/UploadPic/2007-1/200714105532691.jpg ! /Article/UploadPic/2007-1/20071410560783.jpg ! /Article/UploadPic/2007-1/200714105631232.jpg...

AShop Shopping Cart Multiple XSS Vulnerabilities

Ashop Commerce provides a turn-key ecommerce solution with it's revolutionary online store building software. One of the worlds most easy to use web based administrations with award winning features allows the merchant to set up an online store capable of competing with the webs most powerful...

CVE-2006-6816

Multiple SQL injection vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 setpreferences.asp, 2 sendpasswordpreferences.asp, and 3 SecureLoginManager/list.asp in the Local-Admin Panel; 4 the sent parameter ...

PT-2006-6622 · Infinicart · Infinicart

Name of the Vulnerable Software and Affected Versions: INFINICART affected versions not specified Description: The issue concerns SQL injection vulnerabilities that could allow remote attackers to execute arbitrary SQL commands. This is possible via several parameters in different ASP files,...

roundcube-XSS.txt

There is an XSS vulnerability in roundcube webmail: http://demo.roundcube.net/?task=';alert%22XSS%22// Btw, we've been posting 0-day XSS vulnerabilities at http://sla.ckers.org/forum/list.php?3 to take it out of the full disclosure list since lots of people don't want to see the sheer volume of...

INFINICART - sendpassword.asp?email Cross-Site Scripting

INFINICART - sendpassword.asp?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input...