aria-dupaypal.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=62 ----------------------------------------------------------- Software: DuPaypal Method: SQL Injection Vendor: http://www.duware.com/ PoC: /DUpaypal/type.asp?iType=SQL Injection...

Wheatblog <= 1.1 (session.php) Remote File Include Vulnerability

No description provided by source. Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.u.r.a & l2odon & DrtRp & Sh3ll ?php includeonce"$wbclassdir/classDatabase.php"; function StartSession global $sessiondir; if $sessiondir != '' sessionsavepath$sessiondir; if ...

aria-duforum.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=58 ----------------------------------------------------------- Software: DUdForum 3.0 Method: http://duware.com Vendor: PoC: http://target/DUforum/messages.asp?iMsg=SQL Injection...

[Aria-Security Team] FipsSHOP SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian ----------------------------------------------------------- Software: FipsSHOP Vendor: http://fipsasp.com/ Method: SQL Injection PoC: http://target/path/index.asp?cat=SQL INJECTION...

aria-clickgal.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: Click Gallery Method: SQL Injection And XSS Vendor:ClickGallery.net PoC: http://target/viewgallery.asp?galleryid=809&currentpage=SQL Injection http://target/viewgallery.asp?galleryid=SQL injection...

aria-clickcontact.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: Click Contact Method: SQL injection PoC: http://target/default.asp?view=alpha&AlphaSort=SQL Injection http://target/default.asp?In=SQL INJECTION http://target/default.asp?view=All&orderby=SQL Injecti...

aria-clickblog.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: Click Blog Method: SQL injection PoC: http://target/displayCalendar.asp?date=SQL Injection Contact: [email protected]...

aria-fipsshop.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: FipsSHOP Vendor: http://fipsasp.com/ Method: SQL Injection PoC: http://target/path/index.asp?cat=SQL INJECTION http://target/path/index.asp?page=detail&did=SQL INJECTION Contact:...

aria-general.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: General Shopping Cart Method: SQL Injection Vendor:http://warhound.com PoC: http://target/item.asp?ItemID=SQL Injection Contact: [email protected]...

aria-evolve.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: Evolve shopping cart Method: SQL Injection PoC: http://target/path/products.asp?partno=SQL INJECTION Contact: [email protected]...

aria-uphoto.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: uPhotoGallery 1.1 Method: SQL injection PoC: http://target/slideshow.asp?imgid=290&ci=SQL Injection http://target/thumbnails.asp?ci=SQL Injection Contact: [email protected]...

aria-cpanel11beta.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=44 ----------------------------------------------------------- Software: CPanel Tested On CPanel 11 Beta Poc: http://target:2082/frontend/x/files/fileop.html?opdir=PATH&opfile=FILENAME&fileop=XSS...

aria-midicart.txt

Aria-Security Team Advisory Original Advisory : http://www.aria-security.com/forum/showthread.php?t=42 ----------------------------------------------------------- Software: MidiCart ASP Shopping Cart Method: SQL Injection And Cross Site Scripting PoC: http://target/path/itemshow.asp?codeno=SQL...

aria-asplistpics.txt

Aria-Security Team Advisory Original Advisory : http://www.aria-security.com/forum/showthread.php?t=41 ----------------------------------------------------------- Software: ASP ListPics 5.0 Method: SQL Injection PoC: http://target/path/listpics.asp?a=show&ID=SQL INJECTION Contact:...

aria-webhost.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=44 ----------------------------------------------------------- Software: WebHost Manager WHM Tested WHM X v3.1.0 demo.cpanel.net Poc:...

aria-inews.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=40 ----------------------- ------------------------------------ Software: iNews News Manager Method: SQL Injection PoC: http://target/path/articles.asp?ex=XSS Contact: [email protected]...

ClickContact SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian ----------------------------------------------------------- Software: Click Contact Method: SQL injection PoC: http://target/default.asp?view=alpha&AlphaSort=SQL Injection...

aria-ultimate.txt

Aria-Security Team Advisory Original Advisory : http://www.aria-security.com/forum/showthread.php?t=38 ----------------------------------------------------------- Software: Ultimate Survey Pro. Vendor: fisasp.com Method: SQL Injection PoC: http://target/path/index.asp?cat=SQL INJECTION...

aria-idms.txt

Aria-Security Team Advisory Original Advisory : http://www.aria-security.com/forum/showthread.php?t=39 ----------------------------------------------------------- Software: Fixit iDMS Pro Image Gallery Method: SQL Injection And Cross Site Scripting PoC:...

[Aria-Security Team] Evolve shopping cart SQL Injection Vulnerability

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian ----------------------------------------------------------- Software: Evolve shopping cart Method: SQL Injection PoC: http://target/path/products.asp?partno=SQL INJECTION Contact:...