4695 matches found
Authentication Bypass Vulnerability in the Background of FLASH Website Management System of Unicom
CFCMS is a self-service website building platform with full Flash as its core. Authentication bypass vulnerability exists in the background of CFCMS. The vulnerability exists in /xmlEditor/chkuser.asp, which can be exploited by attackers to bypass the background login authentication and launch...
sheldrickwildlifetrust.org XSS vulnerability
Vulnerable URL: https://www.sheldrickwildlifetrust.org/asp/communityprogramsgalleryzoom.asp?Name=62320109659-pic1.jpg=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS...
CVE-2017-5965
The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\ in its pathname, visiting sitecore/shell/applications/install/dialogs/Upload%20Package/UploadPackage2.aspx to upload...
CVE-2017-5965
The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\ in its pathname, visiting sitecore/shell/applications/install/dialogs/Upload%20Package/UploadPackage2.aspx to upload...
Simple ASC CMS 1.2 Cross Site Scripting
Document Title: =============== Simple ASC CMS v1.2 - Guestbook Persistent Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2072 Release Date: ============= 2017-05-21 Vulnerability Laboratory ID VL-ID: ====================================...
CVE-2017-9140
Cross-site scripting XSS vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 11.0.17.406 allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd...
CVE-2017-9140
The CVE-2017-9140 issue affects Telerik Reporting for ASP.NET WebForms (Telerik.ReportViewer.WebForms.dll) prior to R1 2017 SP2 (11.0.17.406). It is a reflected XSS vulnerability exploitable via the bgColor parameter to Telerik.ReportViewer.axd, allowing attacker-controlled script/HTML execution ...
Simple ASC CMS v1.2 - (Guestbook) Persistent Vulnerability
Document Title: =============== Simple ASC CMS v1.2 - Guestbook Persistent Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2072 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15947 CVE-ID: ======= CVE-2017-15947 Release Date:...
Simple ASC CMS v1.2 - Guestbook Persistent Vulnerability
Document Title: =============== Simple ASC CMS v1.2 - Guestbook Persistent Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2072 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15947 CVE-ID: ======= CVE-2017-15947 Release Date:...
CVE-2017-0249
An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests...
CVE-2017-0256
A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests...
asp-secretarias.pt XSS vulnerability
Vulnerable URL: http://www.asp-secretarias.pt/Pesquisa.asp?query=1%27%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
ZYCHCMS V03 '/include/page.asp' file has an arbitrary directory traversal vulnerability
ZYCHCMS is an enterprise website management system. An arbitrary directory traversal vulnerability exists in the ZYCHCMS V03 '/include/page.asp' file. This allows an attacker to traverse directories and view sensitive directory and file information...
cityofpaloalto.org XSS vulnerability
Vulnerable URL: http://www.cityofpaloalto.org/404.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 129774 VIP website status:| No Check cityofpaloalto.org SSL connection:| Grade:...
aronde-immobilier.fr XSS vulnerability
Open Bug Bounty ID: OBB-230392 Description| Value ---|--- Affected Website:| aronde-immobilier.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Login Authentication Bypass Vulnerability in ZYCHCMS V06 /admin/login.asp Page
ZYCHCMS is an enterprise website management system. A login authentication bypass vulnerability exists in the /admin/login.asp page in ZYCHCMS V06. It allows an attacker to log in to the system backend and gain administrator privileges...
ZYCHCMS V04 Arbitrary File Write Vulnerability in /include/page.asp File
ZYCHCMS is an enterprise website management system. An arbitrary file write vulnerability exists in the ZYCHCMS V04 /include/page.asp file. The vulnerability allows attackers to write scripts to arbitrary files to gain server privileges...
U.S. Dept Of Defense: Access to job creation web page on http://████████
Summary: Hi DoD Team ! It looks like we may access to an ASP form on http://███ which enables any unauthenticated web user to create new jobs in the website database without any control. Furthermore, it seems that asp files are created with txt extensions too that enable the files to be readable...
