22 matches found
EUVD-2006-6751
Malware in sbrugna...
EUVD-2006-6332
Malware in sbrugna...
EUVD-2005-1788
Malware in sbrugna...
ShopsN open source mall system ad**_sy**_sa** function SQL injection vulnerability
ShopsN free version of B2C e-commerce is a product of Shanghai Yisu Network Technology Co. ShopsN open source mall system adsysa function SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...
FunkyASP AD System 1.1 - Remote Shell Upload Vulnerability
No description provided by source. FunkyASP AD System v1.1 Remote Shell Upload script: http://www.funkyasp.co.uk/cats.asp?id=1¤cy=GBP ---------------------------------------------------------- Discovered By: ZoRLu Date: 04.04.2009 Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com...
Google Releases Permanent Opt-Out Extension For Chrome
Google has delivered a new tool that enables Chrome users to permanently opt out of ad-tracking cookies in the company’s browser. The new extension gives users the ability to make their choices about not being tracked by online advertisers permanent, at least in Google Chrome. The move by Google ...
FunkyASP AD System 1.1 Remote Shell Upload Vulnerability
No description provided by source. FunkyASP AD System v1.1 Remote Shell Upload script: http://www.funkyasp.co.uk/cats.asp?id=1¤cy=GBP ---------------------------------------------------------- Discovered By: ZoRLu Date: 04.04.2009 Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com...
FunkyASP Ad System 1.1 Shell Upload
FunkyASP AD System v1.1 Remote Shell Upload script: http://www.funkyasp.co.uk/cats.asp?id=1¤cy=GBP ---------------------------------------------------------- Discovered By: ZoRLu Date: 04.04.2009 Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org contact:...
FunkyASP AD System 1.1 - Arbitrary File Upload
FunkyASP AD System v1.1 Remote Shell Upload script: http://www.funkyasp.co.uk/cats.asp?id=1¤cy=GBP ---------------------------------------------------------- Discovered By: ZoRLu Date: 04.04.2009 Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org contact:...
CVE-2006-6768
Multiple cross-site scripting XSS vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the 1 cat or 2 main parameter...
CVE-2006-6768
The CVE-2006-6768 entry documents multiple XSS vulnerabilities in the default.asp page of PWP Technologies The Classified Ad System, exploitable via the (1) cat and (2) main parameters. The underlying issue is cross-site scripting in input handling on that page, with a CVSS base score of 6.8 (Med...
The Classified Ad System 1.0 (main) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: The Classified Ad System 1.0 main Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.mxmania.net $$ : 29.99 . .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...
The Classified Ad System 1.0 (main) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ The Classified Ad System 1.0 main Remote SQL Injection Exploit ================================================================ !/usr/bin/perl Script Name: The Classified Ad...
The Classified Ad System 1.0 - 'main' SQL Injection
!/usr/bin/perl Script Name: The Classified Ad System 1.0 main Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.mxmania.net $$ : 29.99 . .. : ajann,Turkey use IO::Socket; if@ARGV : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are...
CVE-2006-6349
Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via 1 the main parameter in a view action includes/mainpage/view.asp in default.asp or 2 a query in the search engine...
CVE-2006-6349
Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via 1 the main parameter in a view action includes/mainpage/view.asp in default.asp or 2 a query in the search engine...
CVE-2006-6349
CVE-2006-6349 covers multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System. An attacker can remotely execute arbitrary SQL via (1) the main parameter in a view action (includes/mainpage/view.asp) in default.asp or (2) a query in the search engine. The NVD entry cites...
The Classified Ad System [multiple xss & injection sql]
vendor site: http://www.rockfordarea.com/ product : The Classified Ad System bug: multiple xss get & injection sql risk : medium injection sql get: /default.asp?action=view&main='sql injection sql post : just post your query into the search engine xss : /default.asp?action=view1&cat=xss...
CVE-2005-1786
Summary (CVE-2005-1786): FunkyASP AD System 1.1 is affected by an SQL injection in the admin.asp file, exploitable via the password parameter to execute arbitrary SQL and gain privileges. The vulnerability is described across multiple records (CVE/NT NVD entries and PT-2005-2754). The exploitatio...