Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Tamweb CMS SQL Injection Vulnerability

Exploit for asp platform in category web applications Name: Tamweb CMS SQL Injection Vulnerability Type: ASP Category: Webapps Web Site: http://www.tamweb.ir/ Google Dork: inurl:.asp intext:"email protected" Date: 4-Nov-2011 Author: Mr.XHat Discovered By: Mr.XHat Tested On: Windows Server 2003 II...

Hotfm.com.my Cross Site Scripting

Exploit Title: Hotfm.com.my Cross Site Scripting Vulnerability Date: 08/11/2011 - 04:00am Author: Ryuzaki Lawlet Website: http://jusryuz.blogspot.com Tested On: WinXP Platform: ASP Email: [email protected] $ Vulnerable : http://site.com.my/path/galeri.asp?galleryType= $ Preview Sites:...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CVE-2010-5045

Cross-site scripting XSS vulnerability in poll/default.asp in Smart ASP Survey allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in poll/default.asp in Smart ASP Survey allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2010-5045

CVE-2010-5045 is an XSS vulnerability in Smart ASP Survey, specifically in poll/default.asp via the catid parameter. The root cause is lack of input validation/escaping enabling remote script injection. Impact described as script/HTML execution in the victim’s browser; exploitation details (paylo...

CVE-2010-5045

Cross-site scripting XSS vulnerability in poll/default.asp in Smart ASP Survey allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

NATO Research And Technology Org Local File Inclusion

Title: ====== NATO Research & Technology ORG - File Include Vulnerability Date: ===== 2011-11-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=307 VL-ID: ===== 307 Introduction: ============= The NATO Research and Technology Organisation RTO Organisation pour la...

CVE-2010-4989

SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter...

NATO INT RTO - File Include Web Vulnerability

Document Title: =============== NATO INT RTO - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=307 Release Date: ============= 2011-11-01 Vulnerability Laboratory ID VL-ID: ==================================== 307 Common...

Four Corner CMS SQL Injection Vulnerability

Exploit for asp platform in category web applications Name: Four Corner CMS SQL Injection Vulnerability Google Dork: inurl:Default.asp?SectionID= Type: ASP Web Site: http://www.4corner.af/ Data: 2011/08/07 Author: Mr.XHat Discovered By: Mr.XHat Tested On: Windows Server 2003 Exploit:...

Application to the ASP file upload vulnerability 0×0 0 truncation attack-vulnerability warning-the black bar safety net

k ingbase 2011/8/1 Chinese simple narrative This article translated from: 0×0 0 vs ASP file uploads, the original author is: Brett Moore Security-Assessment. com company, this article is written to 0 in 4 years, the original is here: http://...

VulnCheck KEV: CVE-2010-3332

Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services IIS, provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State aka...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

New breakthrough fckeditor vulnerability-vulnerability warning-the black bar safety net

After testing, this method through the kill asp, aspx version, not for php. Before the many ways, such as uploading. asp and other types of files; create. asp, etc. directory...... Today encountered a fck editor, followed before a lot of times like, the above methods to no avail. Create. asp; the...

CVE-2009-5103

Cross-site scripting XSS vulnerability in ATCOM Netvolution 1.0 ASP allows remote attackers to inject arbitrary web script or HTML via the email variable...

CVE-2011-3340

CVE-2011-3340 affects Netvolution CMS 2.5.8 (ASP) where the HTTP Referer header parsing allows blind SQL injection. The vulnerability enables remote attackers to alter content, exfiltrate data (usernames, plaintext passwords), and potentially execute commands on the database server without authen...