CVE-2008-5635

SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...

CVE-2008-5634

CVE-2008-5634 describes an SQL injection vulnerability in Active Force Matrix 2.0, specifically in account.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands through the username and password parameters (potentially related to start.asp). The CVSS 2.0 base score is 7...

CVE-2008-5631

SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL commands via the 1 useremail parameter aka username field or the 2 password parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5627

SQL injection vulnerability in account.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the 1 username parameter aka Email field or the 2 password parameter. NOTE: some of these details are obtained from third party information...

EvansFTP (EvansFTP.ocx) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================== EvansFTP EvansFTP.ocx Remote Buffer Overflow PoC ================================================== EvansFTP EvansFTP.ocx Remote Buffer Overflow PoC + Application : EvansFTP ActiveX + CompanyName...

Hacking tricks of a few over-active Defense method-vulnerability warning-the black bar safety net

Generally the Trojan is added from the start is antivirus software active defense, or 3 6 0 intercept,a few days ago in an online found several registry since the start of the method,the effect is also good,can be considered currently active Defense of a large Dead Space,even of micro-point turne...

Groupmax Workflow - Development Kit for Active Server Pages Cross-Site Scripting Vulnerability

Overview Groupmax Workflow - Development Kit for Active Server Pages contains a cross-site scripting vulnerability. Impact A remote attacker could have the users execute malicious scripts. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropria...

Active Price Comparison v4 (ProductID) Blind SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date:...

activewebmail-blindsql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:emails.aspx TabOpenQuickTab1 Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Web Mail v 4 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Active Time Billing 3.2 - Authentication Bypass

Active Time Billing 3.2 - Authentication Bypass -----------------------------OffensiveTrack------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact on mail & msn : [email protected] script : Active timebilling €xploit :...

Active Time Billing 3.2 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Active Time Billing 3.2 Auth Bypass SQL Injection Vulnerability =================================================================...

Active Web Helpdesk 2 - categoryId Blind SQL Injection

Active Web Helpdesk 2 - categoryId Blind SQL Injection ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! !...

Active Photo Gallery 6.2 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Photo Gallery v 6.2 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...

Active Business Directory v 2 Remote blind SQL Injection Vulnerability

No description provided by source. -----------------------------OffensiveTrack------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact on mail & msn : [email protected] script : Active Business Directory v 2 €xploit :...

activeprice-blindsql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Active Websurvey 9.1 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------  Tybe:Auth Bypass Remote SQL Injection Vulnerability    Vendor: www.activewebsoftwares.com    Software: Active Websurvey v 9.1    author: я3d D3v!L  Â...

activetest21-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:questions.asp QuizID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Test v 2.1 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Active Photo Gallery 6.2 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Active Photo Gallery 6.2 Auth Bypass SQL Injection Vulnerability ================================================================== Tybe:Auth Bypass Remote SQL Injection...

Active Time Billing 3.2 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -----------------------------OffensiveTrack------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact on mail & msn : [email protected] script : Active timebilling €xploit :...

Active Photo Gallery 6.2 - Authentication Bypass

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Photo Gallery v 6.2 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...