ASP-Nuke Community 1.5 - Cookie Privilege Escalation

Title : ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo , pseudo = Login UserName ASPNUKE14%5Fpseudoid , pseudoid = UserId ASPNUKE14%5Femail , email = User Email Save and go ...

CVE-2006-6070

SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute arbitrary SQL commands via the StateCode parameter...

CVE-2006-6070

SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute arbitrary SQL commands via the StateCode parameter...

CVE-2006-6070

SQL injection vulnerability in ASP Nuke 0.80 and earlier (module/account/register/register.asp) allows remote attackers to execute arbitrary SQL via the StateCode parameter. CVSSv2 base score 7.5 (HIGH; NETWORK, LOW access complexity; no authentication; partial confidentiality, integrity, and ava...

ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability

Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ASP Nuke...

aspnuke080.txt

Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ASP Nuke...

ASPNuke 0.80 - 'register.asp' SQL Injection

Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ASP Nuke...

ASP-Nuke-community-v1.4SP3.txt

I MurderSkillz from g00ns.net have found xss vulnerabilities in ASP-Nuke community v1.4 SP3 and possibly other versions. Shouts go to all the g00ns. Once again..g00ns.net fucking owns j00! Found in XSS /aspnuke/default.asp?poll='alertdocument.cookie;&results=1 ----------...

ASP-Nuke-community-v1.4SP2.txt

I MurderSkillz from g00ns.net have found xss vulnerabilities in ASP-Nuke community v1.4 SP2 and possibly other versions. Shouts to z3r0, neX, uid0 exploitercode.com, Zodiac, Wicked, and all the other I may have forgot.. Once again..g00ns.net fucking owns j00! XSS in /articles.asp...

ASP-Nuke伪造Cookie导致信息泄露漏洞

BugCVE: CVE-2002-0523 BUGTRAQ: 4489 ASP-Nuke存在设计问题，可导致攻击者获得主机相关敏感信息。 攻击者可以本地修改Cookie信息并提交，导致主机返回所有当前登陆用户列表或者返回包含WEB ROOT路径的错误信息。 攻击者可以利用这些信息进一步对系统进行攻击。 ASP-Nuke RC1-RC2 厂商补丁： ASP-Nuke -------- 目前厂商已经在最新版本的软件中修补了此漏洞，请到厂商的主页获取最新版本： http://www.asp-nuke.com/downloads.asp...

ASP-Nuke RC1 图象标记跨站脚本执行漏洞(CSS/XSS)

BugCVE: CVE-2002-0520 BUGTRAQ: 4475 ASP-Nuke对用户输入过滤上存在漏洞，可使远程攻击者利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。 ASP-Nuke支持在帖子中用户使用img//img标记插入图象连接，但它未对标记中的内容做充分过滤，这可能导致攻击者在此标记的内容中放入脚本代码，当其他用户浏览此相关链接的时候，脚本将在用户的浏览器中执行。攻击者可能借此得到用户基于Cookie的认证信息。 ASP-Nuke RC1 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 在漏洞修复之前暂时关闭Image标记的使用。...

ASP-Nuke <= 0.80 comment_post.asp远程SQL注入漏洞

ASPNuke中存在SQL注入漏洞，远程攻击者可以利用此漏洞非授权访问数据库。 起因是没有正确的过滤用户输入。请看/module/support/task/commentpost.asp的第36行和第75行代码： ... nTaskID = steNForm TaskID ... If sErrorMsg = Then prevent dup posting here sStat = SELECT TaskID & FROM tblTaskComment & WHERE TaskID = & nTaskID & & AND Subject = & ReplacesSubject, , &...

ASP-Nuke <= 0.80 多个跨站脚本(CSS/XSS)漏洞

BUGTRAQ: 14062 ASPNuke中存在多个跨站脚本漏洞，起因是没有正确的过滤用户输入。在/module/account/register/forgotpassword.asp第33行和103行代码中： ? ... sEmail = steForm Email ... TR TD class= forml % steTxt E-Mail % reqBR INPUT TYPE= text NAME= email VALUE= %= sEmail % SIZE= 22 MAXLENGTH= 80 class= form /TD /TR TR ... ?...

ASP-Nuke RC1-RC2 用户资料页面跨站脚本(CSS/XSS)执行漏洞

BugCVE: CAN-2002-0521 BUGTRAQ: 4481 ASP-Nuke对用户输入过滤上存在漏洞，可使远程攻击者利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。 ASP-Nuke中的用户资料页面处理用户输入时没有充分过滤相关Javascript代码，攻击者可以在任意用户资料字段处输入恶意脚本代码，当其他用户浏览相关信息的时候，脚本将在用户的浏览器中执行。攻击者可能借此得到用户基于Cookie的认证信息。 ASP-Nuke RC1-RC2 厂商补丁： ASP-Nuke --------...

ASP-Nuke RC1-RC2 明文Cookie认证信息导致任意访问漏洞

BugCVE: CAN-2002-0522 BUGTRAQ: 4484 ASP-Nuke中Cookie存在设计问题，可导致攻击者以任意用户访问应用系统。 ASP-Nuke使用Cookie进行认证，当用户使用Cookie时，Cookie以非加密形式存储在本地系统上，攻击者可以通过修改Cookie信息，导致以任意用户权限访问ASP-Nuke系统，包括以管理员帐户权限访问。 ASP-Nuke RC1-RC2 厂商补丁： ASP-Nuke -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

ASP-Nuke RC2 存在跨站脚本(CSS/XSS)执行漏洞

BugCVE: CAN-2002-0521 BUGTRAQ: 4477 ASP-Nuke是一款基于WEB的系统架构程序，运行在多种Unix和Linux系统下，也可运行于Windows平台下。 ASP-Nuke对用户输入过滤上存在漏洞，可使远程攻击者利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。 ASP-Nuke中的downloads.asp和post.asp在处理用户提供的输入没有过滤相关的脚本代码，攻击者可以构建包含恶意脚本代码的内容提交给连接，当其他用户浏览相关此连接的时候，脚本将在用户的浏览器中执行。攻击者可能借此得到用户基于Cookie的认证信 ASP-Nuke RC2...

CVE-2005-2065

HTTP response splitting vulnerability in languageselect.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web caches via CRLF "%0d%0a" sequences in the LangCode parameter...

CVE-2005-2064

Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web script or HTML via the 1 email parameter to forgotpassword.asp, or the 2 FirstName, 3 LastName, 4 Username, 5 Password, 6 Address1, 7 Address2, 8 City, 9 ZipCode, 10 Email parameter to...

CVE-2005-2066

SQL injection vulnerability in commentpost.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL statements via the TaskID parameter...

M4DR007-07SA.txt

M4DR007-07SA security advisory: Multiple vulnerabilities in ASP Nuke 0.80 Published: 26 16 2005 Released: 26 16 2005 Name: ASP Nuke Affected Systems: req " SIZE="22" MAXLENGTH="80" class="form" ... ? As we can see there isn't any control on the 'email' parameter when the board get it's value. Sin...