12 matches found
EUVD-2005-3594
Malware in sbrugna...
XtremeASP PhotoGallery 2.0 Adminlogin.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9438/info XtremeASP PhotoGallery is prone to an SQL injection vulnerability. The issue is reported to exist in the administration login interface, which does not sufficiently sanitize user-supplied input for username and...
myNewsletter <= 1.1.2 (adminLogin.asp) Login Bypass Exploit
No description provided by source. !-- orginal advisory : http://www.kapda.ir/advisory-340.html -- htmlcenterh4KAPDA.ir --- myNewsletter = 1.1.2 Login bypass exploit/h4brchange action in source and then submit /centerform name=adminLogin method=post action=http://site/newsletter/adminLogin.asp...
CosmoQuest Login Bypass Vulnerability
Exploit for asp platform in category web applications InformatioN Title : CosmoQuest bypass login page Vulnerability Author : Net.Edit0r Vendor or Software Link : http://www.cosmoquest.info/ Email : email protected Data : 2011-03-29 Google dork: "Powered by CosmoQuest" Category: Webapps Tested on...
Sql injection
Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...
CVE-2009-2604
CVE-2009-2604 concerns multiple SQL injection vulnerabilities in Zen Help Desk 2.1, specifically in adminlogin.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands via the (1) userid and (2) PassWord parameters to admin.asp. The affected component is the admin login fl...
CVE-2004-2746
CVE-2004-2746 : The connected Nessus/NASL entry confirms a SQL injection in XTreme ASP Photo Gallery 2.0, specifically in adminlogin.asp via the (1) username and (2) password parameters. This flaw allows remote attackers to inject arbitrary SQL commands, and the NASL text notes that this may be u...
Sql injection
Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in 1 validatelogin.asp or 2 adminlogin.asp...
myNewsletter <= 1.1.2 (adminLogin.asp) Login Bypass Exploit
No description provided by source. !-- orginal advisory : http://www.kapda.ir/advisory-340.html -- htmlcenterh4KAPDA.ir --- myNewsletter = 1.1.2 Login bypass exploit/h4brchange action in source and then submit /centerform name="adminLogin" method="post"...
myNewsletter 1.1.2 - adminLogin.asp Authentication Bypass
myNewsletter 1.1.2 - adminLogin.asp Authentication Bypass KAPDA.ir --- myNewsletter change action in source and then submit www.kapda.ir milw0rm.com 2006-06-06...
myNewsletter 1.1.2 - 'adminLogin.asp' Authentication Bypass
KAPDA.ir --- myNewsletter change action in source and then submit www.kapda.ir milw0rm.com 2006-06-06...
ECommPro 3.0 - Adminlogin.asp SQL Injection
ECommPro 3.0 - Adminlogin.asp SQL Injection source: https://www.securityfocus.com/bid/13274/info EcommProV3 is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitati...