4695 matches found
Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions
Summary Microsoft Source Code Analyzer for SQL Injection is a static code analysis tool for finding SQL Injection vulnerabilities in ASP code. Customers can run the tool on their ASP source code to help identify code paths that are vulnerable to SQL Injection attacks. Description The package...
Web Design by Webz SQL Injection Vulnerability
Exploit for asp platform in category web applications Title : Web Design by Webz Vulnerable to SQL Injection Web : http://www.webz.com.my/ Found by: p0pc0rn 08/03/2011 Dork : intext:"Web Design by Webz" filetype:asp SQL - Microsoft JET Database Engine error...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
WS Interactive Automne 4.1 - adminupload-controler.php Arbitrary File Upload
WS Interactive Automne 4.1 - adminupload-controler.php Arbitrary File Upload source: https://www.securityfocus.com/bid/46774/info Automne is prone to an arbitrary-file-upload vulnerability. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in...
5UCMS <= v1. 2. 2 0 2 4 background not validation and SQL injection-vulnerability warning-the black bar safety net
Brief description: The background file does not do verification, it has been filtered does not strictly lead toSQL injection Detailed description: File location admin/ajax. asp 2 4 row Case "modeext" .. 2 6 row ecid=ReplaceRequest"cid","'","" 2 7 row cid=ReplaceRequest"id","'","" .. .. 3 1 The li...
Djm Web Agency (page.asp) Sql Injection Vulnerability
Exploit for php platform in category web applications Djm Web Agency page.asp Sql Injection Vulnerability .:. Author : eXeSoul .:. Contact : email protected .:. Date : 04-03-2011 .:. category : Web Apps SQli .:. HomePage : www.indishell.in .:. Tested on : windows/linux .:. Vulnerability : ASP Sql...
DJM Web Agency SQL Injection
Djm Web Agency page.asp Sql Injection Vulnerability .:. Author : eXeSoul .:. Contact : [email protected] .:. Date : 04-03-2011 .:. category : Web Apps SQli .:. HomePage : www.indishell.in .:. Tested on : windows/linux .:. Vulnerability : ASP Sql Injection Vunerability .:. Vendor : www.djmweb.be ....
ewebeditor 2.8 commercial version of the backend plug in a word and fix-vulnerability warning-the black bar safety net
Affected version:2.8 Business Edition Attack use:login background, click on Change Password---new password set to 1":eval request"a"’ Set after the success, the access to asp/config. asp file, the word Trojan is written to this file inside the In this paper, ewebeditor commercial version...
WSI CMS SQL Injection Vulnerability
Exploit for php platform in category web applications Web : http://www.wsicorporate.com/ Dork : intext:"Powered by WSI" filetype:asp SQL --- http://site.com/xxx.asp?PId=SQL http://site.com/xxx.asp?Id=SQL http://site.com/form.asp?formname=nameSQL POC --- http://site.com/xxx.asp?PId=1234 having 1=1...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Symantec IM Manager 'eval()' Code Injection Vulnerability
This host is installed with Symantec IM Manager and is prone to code injection vulnerability. OpenVAS Vulnerability Test $Id: secpodsymantecimmanagercodeinjvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ Symantec IM Manager 'eval' Code Injection Vulnerability Authors: Sooraj KS Copyright: Copyrigh...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
ASP may appear in an included vulnerability(Server. execute)-vulnerability warning-the black bar safety net
author: bin % Server. executerequest“file” % With the include distinction, it can dynamically include files. Is included file inside the executable ASP code, in a foreign source in use. include.asp?file=./1.txt 1.txt %response. writenow%...
Site Designed by Hypersoft Solutions SQL Injection Vulnerability
Exploit for asp platform in category web applications Web : http://www.hypersoftsolutions.com/ Filetype : asp Dork : intext:"By: HypersoftSolutions.Com" : inurl :"cms.asp?LinkId=" SQL --- http://site.com/cms.asp?LinkId=SQL http://site.com/cms.asp?CatId=SQL POC --- http://site.com/cms.asp?LinkId=1...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Use the IIS semicolon parsing upload vulnerability analysis-vulnerability warning-the black bar safety net
First look at the following a very common file upload extension filter code: fileExt=lcaseofile. FileExt arrUpFileType=splitUpFileType,"|" for i=0 to uboundarrUpFileType if fileEXT=trimarrUpFileTypei then EnableUpload=true exit for end if next if fileEXT="asp" or fileEXT="asa" or fileEXT="aspx" o...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Multi Agent System city. asp SQL injection vulnerability and fix-vulnerability warning-the black bar safety net
Author: R4dc0re Information Description: a Multi-Agent System of the city. asp the reason there may be the use ofSQL injectionis due to this file and there is insufficient filtering of user requests query caused. The use of this vulnerability may allow an attacker to use to the server application...