EUVD-2002-0516

Malware in sbrugna...

ASP-Nuke 1.0/1.2/1.3 - Remote User Database Access

source: https://www.securityfocus.com/bid/9355/info A problem has been identified in ASP-Nuke when user credentials are stored on a system. Because of this, an attacker may be able to gain unauthorized access to sensitive information. http://www.example.com/db/main.mdb...

CVE-2002-0521

Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nuke users via script in 1 the name parameter in downloads.asp, 2 the message parameter in Post.asp, or 3 a web site URL in profile.asp...

Security holes in ASP-Nuke

Product : ASP-Nuke http://www.asp-nuke.com Versions : RC1, RC2 Problems : RC1 : - By-passing of filters against HTML RC2 : - Access to all accounts - Cross Site Scripting - Path disclosure More details : in french : http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt translated by Google :...