108 matches found
ASPired2Quote (quote.mdb) Remote Database Disclosure Vulnerability
No description provided by source. --------------------------------------------------------- Portal Name: ASPired2Quote Vendor : http://thenetguys.us/Home/Quote.asp Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...
ASPired2Quote Database Disclosure
--------------------------------------------------------- Portal Name: ASPired2Quote Vendor : http://thenetguys.us/Home/Quote.asp Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD: http://site.com/Path/admin/quote.mdb...
ASP-CMS 1.0 (index.asp cha) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================= ASP-CMS 1.0 index.asp cha SQL Injection Vulnerability ======================================================= ASP-CMS v.1.0 Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Download :...
Sql injection
SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the sideid parameter...
Dataspade xss
Vuln. discovered by : r0t Date: 23 September 2008 Vendor:http://www.dataspade.com/ affected versions:DataSpade V1.0 other versions also can be affected. orginal advisory: http://pridels-team.blogspot.com/2008/09/dataspade-xss-vuln.html DataSpade contains a flaws that allows a remote Cross-Site...
FipsCMS Light 2.1 - 'r' SQL Injection
Exploit Code: victim/path/home/index.asp?w=pages&r=9999999 union select all 0,username,null,0x1 from admin victim/path/home/index.asp?w=pages&r=9999999 union select all 0,password,null,0x1 from admin http://localhost:2222/lab/cms/admin Download:http://login.fipsasp.com/File.asp?ID=60&CatID=5 Foun...
MVC-Web CMS 1.0/1.2 (index.asp newsid) SQL Injection Vulnerability
No description provided by source. Bl@ckbe@rD 'Tunisian TerrorisT' ------------------------- $$$$$$$$$$$$$$$$$$$$$$$---------------------------------------...
MVC-Web CMS 1.0/1.2 (index.asp newsid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== MVC-Web CMS 1.0/1.2 index.asp newsid SQL Injection Vulnerability ================================================================== -------------------------...
i-pos StoreFront 1.3 - index.asp SQL Injection
i-pos StoreFront 1.3 - index.asp SQL Injection source: https://www.securityfocus.com/bid/29471/info i-pos Storefront is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...
Unfixed XSS vulnerability at recanati.tau.ac.il
Security researcher wir3less-hack3r, has submitted on 27/04/2008 a cross-site-scripting XSS vulnerability affecting recanati.tau.ac.il, which at the time of submission ranked 27363 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2008. It ...
myphotographer image shop script /events/index.asp sql injection
myphotographer image shop script /events/index.asp sql injection Credit : CodeXpLoder'tq mail : codexploderathotmaildotcom site : Biyosecurity.net,expw0rm.com thx : BiyoSecurityTeam,Liz0ziM,eno7,3APA3A Sourge site : http://www.myphotographer.com/support/ 1-...
CVE-2007-4076
Multiple SQL injection vulnerabilities in index.asp in Alisveris Sitesi Scripti allow remote attackers to execute arbitrary SQL commands via the 1 productid or 2 catid parameter in a product mod action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...
CVE-2007-4075
CVE-2007-4075: XSS in index.asp of Alisveris Sitesi Scripti. The vulnerability occurs in the search mod action via the q parameter, allowing remote attackers to inject arbitrary script/HTML. Affected software is the Alisveris Sitesi Scripti package; root cause is a reflected/parameter-based XSS i...
CVE-2007-4076
CVE-2007-4076 describes multiple SQL injection vulnerabilities in index.asp of the Alisveris Sitesi Scripti. The issue allows remote attackers to execute arbitrary SQL commands through the (1) product_id or (2) cat_id parameters in a product mod action. The NVD entry notes the provenance is from ...
Sql injection
SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-6115...
CVE-2007-2561
CVE-2007-2561 describes an SQL injection vulnerability in the fipsCMS web app. The flaw is in the file index.asp of fipsCMS 2.1, where the parameter pid can be manipulated by an attacker to execute arbitrary SQL commands on the backend database. This is noted as a different vector from CVE-2006-6...
CVE-2006-7118
The CVE-2006-7118 issue affects DMXReady Site Engine Manager 1.0, where index.asp is vulnerable to SQL injection via the mid parameter. The underlying cause is improper input handling allowing arbitrary SQL execution by remote attackers. The provided documents do not specify affected versions bey...
UApplication UGuestbook Index.ASP SQL注入漏洞
UApplication UGuestbook是一款基于ASP的WEB应用程序。 UApplication UGuestbook不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Index.ASP'脚本对用户提交的'page'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Uapplication Uguestbook 1.0 http://www.uapplication.com/ http://www.example.com/index.asp?Block=1&page=SQL INJECTION...
CVE-2006-6380
CVE-2006-6380 concerns a Cross-site Scripting (XSS) vulnerability in Ultimate HelpDesk’s index.asp, exploitable via the keyword parameter. The issue allows remote attackers to inject arbitrary web script or HTML into the page, with the potential to affect users’ sessions and data depending on the...