Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

ASP-Nuke 'gotourl.asp'开放重定向漏洞

Bugtraq ID:66523 ASP-Nuke是一款基于WEB的系统架构程序，运行在多种Unix和Linux系统下，也可运行于Windows平台下。 ASP-Nuke允许攻击者构建恶意URI，诱使用户解析，可重定向用户通信，进行网络钓鱼等攻击。 0 ASP-Nuke 2.0.7 目前没有详细解决方案： http://www.asp-nuke.com/ http://host/gotoURL.asp?url=Open Redirectionid=43569...

Web message boards of the Big Three dangerous vulnerability-a vulnerability warning-the black bar safety net

Message boards as a web page with the viewer interactive media and popular,in a variety of large and small site almost always has its shadow,so the message Board is now the site of a key protagonist,so its safe not not seriously considered,now listed in the guestbook when making the three big...

ASP-Nuke 2.0.7 - (gotourl.asp) Open Redirect Vulnerability

Exploit for asp platform in category web applications + ASP-Nuke 2.0.7 - Open Redirect Vulnerability in gotourl + Date: 28/03/2014 + Risk: Low + Remote: Yes + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.aspnuke.it/ + Contact: email protected + Tested on: Windows 7 and Linux +...

ASP-Nuke 2.0.7 - gotourl.asp Open Redirect

ASP-Nuke 2.0.7 - gotourl.asp Open Redirect + ASP-Nuke 2.0.7 - Open Redirect Vulnerability in gotourl + Date: 28/03/2014 + Risk: Low + Remote: Yes + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.aspnuke.it/ + Contact: [email protected] + Tested on: Windows 7 and Linux +...

ASP-Nuke 2.0.7 - 'gotourl.asp' Open Redirect

ASP-Nuke 2.0.7 - Open Redirect Vulnerability in gotourl + Date: 28/03/2014 + Risk: Low + Remote: Yes + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.aspnuke.it/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: gotourl.asp + Version: ASP-Nuke...

ASP-Nuke 2.0.7 Open Redirect

ASP-Nuke 2.0.7 - Open Redirect Vulnerability in gotourl + Date: 28/03/2014 + Risk: Low + Remote: Yes + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.aspnuke.it/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: gotourl.asp + Version: ASP-Nuke...

VulnCheck KEV: CVE-2014-0253

Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine TCP connection states, which allows remote attackers to cause a denial of service ASP.NET daemon hang via crafted HTTP requests that trigger persistent resource consumption for a 1 stale or...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Design/Logic Flaw

TRENDnet TEW-812DRU router allows remote authenticated users to execute arbitrary commands via shell metacharacters in the 1 wan network prefix to internet/ipv6.asp; 2 remote port to adm/management.asp; 3 pptp username, 4 pptp password, 5 ip, 6 gateway, 7 l2tp username, or 8 l2tp password to...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Microsoft IIS ASP Handling Code Execution (MS08-006) - Ver2 (CVE-2008-0075)

Microsoft Internet Information Services IIS is a multi-featured server product that ships with all versions of Microsoft. The product provides FTP, SMTP, NNTP and HTTP services. The HTTP component, known as the WWW Publishing Service, allows for the serving of dynamic content, notably in the form...

Microsoft IIS ASP Handling Code Execution (MS08-006) - Ver2 (CVE-2008-0075)

Microsoft Internet Information Services IIS is a multi-featured server product that ships with all versions of Microsoft. The product provides FTP, SMTP, NNTP and HTTP services. The HTTP component, known as the WWW Publishing Service, allows for the serving of dynamic content, notably in the form...

CMS Afroditi 1.0 Blind SQL Injection

Exploit Title: CMS Afroditi v.1.0 Blind SQL Injection Date: 30/12/2013 Exploit Author: projectzero labs Vendor Homepage: http://www.naxtech.com Vendor Informed: 20 & 24/12/2013 Software Demo: http://afroditi.naxtech.com Version: v.1.0 About the software: =================== Αs indicated in the...

FoosunCms the asp version getshell-a vulnerability warning-the black bar safety net

In the file\User\award\awardAction. asp: | 1 2 3 4 5 6 7 8 9 | Integral=NoSqlHackrequest. QueryString"Integral" ifaction="join"then UserConn. execute"Insert into FSMEUserPrize prizeid,usernumber,awardID values" CintStrprizeID&",'"&session"FSUserNumber"&"'," CintStrawardID&"" 'Get the current numb...

FoosunCms(wind noise cms) asp version sql vulnerability attached to the exp-bug warning-the black bar safety net

FoosunCms the asp version getshell In the file\User\award\awardAction. asp: Integral=NoSqlHackrequest. QueryString"Integral" if action="join" then UserConn. execute"Insert into FSMEUserPrize prizeid,usernumber,awardID values" CintStrprizeID&",'"&session"FSUserNumber"&"'," CintStrawardID&"" 'Get t...

JVN#21336955: Cybozu Dezie vulnerable to cross-site scripting

Cybozu Dezie provided by Cybozu, Inc. contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the web browser of a user that is logged on. Solution Update the Software Update to the latest version according to the information provided by the developer. Product...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...