CVE-2005-4165

Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the 1 forumid parameter to forum.asp, 2 unspecified parameters to register.asp, and 3 the "Search For" field in search.asp...

CVE-2005-4165

CVE-2005-4165 affects ASP-DEV ASP Resources Forum. The vulnerability allows remote SQL injection through (1) forum_id in forum.asp, (2) unspecified params in register.asp, and (3) the Search For field in search.asp, enabling arbitrary SQL execution. The NVD notes a base score of 7.5 (HIGH) with n...

CVE-2005-4165

Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the 1 forumid parameter to forum.asp, 2 unspecified parameters to register.asp, and 3 the "Search For" field in search.asp...

CVE-2005-4165: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the 1 forumid parameter to forum.asp, 2 unspecified parameters to register.asp, and 3 the "Search For" field in search.asp...

ASP-DEv XM Forum IMG Tag Script Injection Vulnerability

The remote web server contains an ASP script which is vulnerable to a cross site scripting issue. Description : The remote host appears to be running the ASP-DEV XM Forum. There is a flaw in the remote software which may allow anyone to inject arbitrary HTML and script code through the BBCode IMG...

CVE-2005-1008

Cross-site scripting XSS vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag...

CVE-2005-1008

Cross-site scripting XSS vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag...

CVE-2005-1008

CVE-2005-1008 is an XSS vulnerability in ASP-DEv XM Forum RC3, affecting posts.asp where a javascript: URL in an IMG tag can inject arbitrary script/HTML. The OpenVAS/Nessus entries corroborate a cross-site scripting issue in this XM Forum component. The connected documents do not provide specifi...

CVE-2005-1008: Undefined Security Weakness

Cross-site scripting XSS vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag...

[NT] ASP-Dev Multiple Cross Site Scripting Vulnerabilities

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

ZH2003-4SA (security advisory): ASP-DEV Discussion Forum V2.0

ZH2003-4SA security advisory: ASP-DEV Discussion Forum V2.0 Published: 12/07/2003 Released: 12/07/2003 Name: ASP-DEV Discussion Forum V2.0 Affected Systems: All versions Issue: Remote attackers can obtain users information including passwords Author: [email protected] Description Zone-h Security...

ASP-DEV Discussion Forum 2.0 - Admin Directory Weak Default Permissions

ASP-DEV Discussion Forum 2.0 - Admin Directory Weak Default Permissions source: https://www.securityfocus.com/bid/8172/info It has been reported that a vulnerability exists in ASP-DEV Discussion Forum that exposes potentially sensitive information. Because of this, an attacker may be able to gain...

ASP-DEV Discussion Forum 2.0 - Admin Directory Weak Default Permissions

source: https://www.securityfocus.com/bid/8172/info It has been reported that a vulnerability exists in ASP-DEV Discussion Forum that exposes potentially sensitive information. Because of this, an attacker may be able to gain access to user credentials. User credentials are stored in the...