CVE-2006-0440

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password possibly via another vulnerability that reads it from a data file, then including the hash in a cookie...

CVE-2006-0439

Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing data/userlist.txt...

CVE-2006-0440

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password possibly via another vulnerability that reads it from a data file, then including the hash in a cookie...

CVE-2006-0440

Text Rider 2.4 is affected by an authentication-bypass vulnerability: an attacker can obtain the MD5 hash of the password (potentially from another vulnerability that reads it from a data file) and include the hash in a cookie to bypass login and upload files without a valid password. The descrip...

[eVuln] Text Rider Sensitive Information Disclosure

New eVuln Advisory: Text Rider Sensitive Information Disclosure http://evuln.com/vulns/46/summary.html --------------------Summary---------------- Software: Text Rider Sowtware's Web Site: http://robot.ir/blog/mollasadra/textrider/ Versions: 2.4 Critical Level: Dangerous Type: Sensitive Informati...

ASPrider16.txt

Vendor : http://www.asp-rider.com Vulnerable Versions : 1.6 Where is the bug ---------------------- in default.asp : refsss=splitrefererssss, "/",-1,1 refererdomain=refsss2 strsql="Select From tblrefererd where domain='" & refererdomain & "'" objrs.open strsql, objconn,3,3 ----------------------...

CVE-2005-3931

CVE-2005-3931 : A SQL injection flaw exists in default.asp of ASP-Rider 1.6 , allowing remote attackers to inject arbitrary SQL commands via the HTTP Referer. The vulnerability targets the input handling in that page/file, enabling unauthorized data access or manipulation as described in the publ...

CVE-2005-3931

SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer...

CVE-2005-3931

SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer...

ASP-Rider Default.asp SQL Injection

Vendor : http://www.asp-rider.com Vulnerable Versions : 1.6 Where is the bug ---------------------- in default.asp : refsss=splitrefererssss, "/",-1,1 refererdomain=refsss2 strsql="Select From tblrefererd where domain='" & refererdomain & "'" objrs.open strsql, objconn,3,3 ----------------------...

ASP-Rider 1.6 - default.asp SQL Injection

ASP-Rider 1.6 - default.asp SQL Injection source: https://www.securityfocus.com/bid/15617/info ASP-Rider is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

ASP-Rider 1.6 - 'default.asp' SQL Injection

source: https://www.securityfocus.com/bid/15617/info ASP-Rider is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

CVE-2004-1401

CVE-2004-1401 corresponds to a SQL injection in ASP-Rider’s verify.asp via the username parameter, allowing remote attackers to manipulate SQL and bypass authentication, potentially gaining administrative access. Affected software: ASP-Rider (ASP scripts). Root cause: improper input handling in v...

CVE-2004-1401

SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and bypass authentication via the username parameter...

CVE-2004-1401

SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and bypass authentication via the username parameter...

aspSQL.txt

-------------------www.karchack.com-------------------------- -------------------www.karchack.net-------------------------- affected software decribtion : asp-rider is a full farsi weblog written in asp www.asp-rider.com -------------------------------------- Vulnerabilities: the file verify.asp ...

[SA13470] ASP-rider "username" SQL Injection Vulnerability

TITLE: ASP-rider "username" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA13470 VERIFY ADVISORY: http://secunia.com/advisories/13470/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: ASP-rider http://secunia.com/product/4380/ DESCRIPTION: shervin...

ASP-rider is vulnerable to sql injection attack

-------------------www.karchack.com-------------------------- -------------------www.karchack.net-------------------------- affected software decribtion : asp-rider is a full farsi weblog written in asp www.asp-rider.com -------------------------------------- Vulnerabilities: the file verify.asp ...

ASP-Rider - SQL Injection

ASP-Rider - SQL Injection source: https://www.securityfocus.com/bid/11933/info A remote SQL injection vulnerability reportedly affects ASP-Rider Web blog. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker m...

ASP-Rider verify.asp username Parameter SQL Injection

The remote host appears to be running ASP-Rider, a set of ASP scripts designed to maintain a blog. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands, which could in turn be used to gain administrative access on the remote host. %NASLMINLEVEL 70300 C...