34 matches found
CVE-2019-25765
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
CVE-2019-25765 ASP-CMS SQL Injection via commentList.asp id Parameter
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
EUVD-2019-20201
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
CVE-2019-25765 ASP-CMS SQL Injection via commentList.asp id Parameter
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
CVE-2019-25765
CVE-2019-25765 describes a SQL injection in the ASP-CMS commentList.asp endpoint. The vulnerability arises from unsafely handling the id parameter in GET requests, enabling unauthenticated remote attackers to inject arbitrary SQL. Attackers can bypass the keyword blocklist by interleaving the str...
CVE-2019-25765
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
VulnCheck KEV: CVE-2019-25765
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
PT-2026-71707
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by...
EUVD-2007-5240
Malware in sbrugna...
EUVD-2008-6323
Malware in sbrugna...
PocCollect
This repository is an offensive tool for vulnerability scanning and exploitation, specifically targeting various web applications and services. The primary vulnerability class targeted is SQL injection, with specific examples of exploits for Struts2, 08CMS, and ASPCMS. The tool is written in Pyth...
ASP4CMS AspCMS Information Disclosure Vulnerability
ASP4CMS AspCMS is China's ASP4CMS open source laboratory of a free enterprise website construction system . The system supports customized templates and plug-in extensions and other features. ASP4CMS AspCMS 2.7.2 version of the member/Orderinfo.asp file has a security vulnerability. A remote...
ASPCMS 2.2.9 /admin_aspcms/_content/_Tag/AspCms_TagFun.asp SQL注入漏洞
No description provided by source...
ASPCMS old version spike get SHELL-vulnerability warning-the black bar safety net
/admin/system/AspCmsSiteSetting. asp? action=saves Direct POST: runMode=1&siteMode=1&siteHelp=%B1%BE%CD%F8%D5%BE%D2%F2%B3%CC%D0%F2%C9%FD%BC%B6%B9%D8%B1%D5%D6%D0&SwitchComments=1&SwitchCommentsStatus=1&switchFaq=0:Y=requestchr3...
Acidcat ASP CMS 3.5.2 Cross Site Scripting
Exploit Title: Acidcat ASP CMS v 3.5.1 - 3.5.2 Admin Panel - Reflected Cros Site-Scripting XSS Script Page : http://www.acidcat.com Date: 20-01-2012 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE9 Cross-Site Scripting XSS POC:...
Acidcat ASP CMS 3.5 - Multiple Cross-Site Scripting Vulnerabilities
Acidcat ASP CMS 3.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51608/info Acidcat ASP CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated...
Acidcat ASP CMS 3.5 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/51608/info Acidcat ASP CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary...
Sql injection
SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter...