CVE-2009-5102

CVE-2009-5102 affects ATCOM Netvolution 1.0 ASP. The vulnerability is in default.asp and allows SQL injection via the bpe_nid parameter, enabling remote attackers to execute arbitrary SQL commands. The connected documents provide the same description across sources; no exploitation details or pat...

CVE-2009-5102

SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL commands via the bpenid parameter...

The copper plate while the net mass mailing statistics system v1. 2 vulnerability and the Fix-vulnerability warning-the black bar safety net

Team:makebugs Author: fate 'Fenlei. asp IF Request. QueryString"Action"="del" Then ID=Request. QueryString"ID" IF Countss "tui","Fenlei",ID 0 then 'Slightly IF Request. QueryString"Action"="Add" Then Tname=Request. Form"Typename" Set Rs=Server. CreateObject"adodb. Recordset" Sql="Select From Fenl...

Netvolution referer header SQL injection vulnerability

Netvolution CMS v2.5.8 is vulnerable to a blind SQL injection attack in the HTTP “referer” header. A malicious user may utilize this vulnerability to modify content on the vulnerable website, inject malicious javascript code to a visitor’s browser, collect CMS usernames and plaintext passwords an...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Netvolution CMS 2.5.8 Blind SQL Injection

Netvolution CMS v2.5.8 is vulnerable to a blind SQL injection attack in the HTTP “referer” header. A malicious user may utilize this vulnerability to modify content on the vulnerable website, inject malicious javascript code to a visitor’s browser, collect CMS usernames and plaintext passwords an...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

ezCourses Remote Permission Bypass

,-.-. | | | | | o ,---. o | o | | |,---.,---.|---.,---.,---.|---. |---|,---.,---.|/ .,---.,---. |---|,---.,---.,---.,---..,---.|--- .,---.,---. | | |,---|| || || |---'| | | |,---|| | \ || || | | |---.---.| || |,---|| || || | ' '---^---| ' ---'---'o '---^---' '---|o '---'---'---'---'---^---'---' '...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Pheunix SQL Injection

================================================ Exploit Title : PHEUNIX SQL Injection Vulnerability Google Dork : intext:"Site By : PHEUNIX" inurl:service.php?service= Date : 2011-24-09 Author : nGa Sa Lu GaNgst3r Service Link : http://pheunix.co.in/portfolio.asp Tested on : Vista Platform :...

Wind crossing technology ASP online shopping v11. 9 1 9 the vulnerability and fix-vulnerability warning-the black bar safety net

MakeBug [email protected] 'conn. asp % On Error Resume Next servermappath=server. mappath"/the serverinfo. asa" 'Slightly DBstr=""&txt. ReadLine&"" 'database address name 'Slightly % Read the serverinfo. asa 'the serverinfo. asa /chinammcdata/chinammcshop. mdb Use method:...

A-Cart 2.0 SQL Injection

Exploit Title: A-CART 2.0 SQL Injection Vulnerability Author: J.O Contact: [email protected] Website: http://www.m-h-a.org From : Morocco ---------------------------------------- A-CART 2.0 SQL Injection Vulnerability Vendor: http://www.alanward.net/acart/ Demo :...

A-Cart Pro SQL Injection

Exploit Title: A-CART Pro SQL Injection Vulnerability Author: J.O Contact: [email protected] Website: http://www.m-h-a.org From : Morocco ---------------------------------------- A-CART Pro SQL Injection Vulnerability Vendor: http://www.alanward.net/acart/ Demo :...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Asp Basit Haber Script 1.0 SQL Injection

Exploit Title: Asp Basit Haber Script Ver1.0 SQL Injection Vulnerability Google Dork: n/a Date: 18.09.2011 Author: m3rciL3Ss Software Link:http://www.asprehberi.net/icerik/2479.html Version:v1.0 Tested on: http://scripts.ay-computer.de Exploit:http://scripts.ay-computer.de/haber.asp?id=28'...

Aspgwy Access 1.0.0 Cross Site Scripting

=========================================================== aspgwyaccess1.0.0 XSS Vulnerability ----------------------------------------------------------- foun by :kurd-team group : kurdish hackers team contact : [email protected] site : kurdteam.org...

ASP Basit Haber Script 1.0 - id SQL Injection

ASP Basit Haber Script 1.0 - id SQL Injection source: https://www.securityfocus.com/bid/49667/info ASP Basit Haber Script is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit will...

ASP Basit Haber Script 1.0 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/49667/info ASP Basit Haber Script is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit will allow an attacker to compromise the application,...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...