Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Texspares Sql Injection Vulnerability

Exploit for asp platform in category web applications ===================================== Texspares Sql Injection Vulnerability ===================================== Exploit Title:Texspares Sql injection Vulnerability Date: 01-18-2010 Author:Ashiyane Digital Security Team Platform / Tested on:...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Patient Folder SQL Injection

============================================================ Patient folder THEME ASP Local SQL Injection Vulnerability ============================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Patient folder (THEME ASP) - SQL Injection

Patient folder THEME ASP - SQL Injection ============================================================ Patient folder THEME ASP Local SQL Injection Vulnerability ============================================================ ----------------------------------- By: SA H4x0r - Emails: [email protected] ...

Patient folder (THEME ASP) - SQL Injection

============================================================ Patient folder THEME ASP Local SQL Injection Vulnerability ============================================================ ----------------------------------- By: SA H4x0r - Emails: [email protected] - Date: 2010/05/31 -...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CVE-2010-1459

The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting XSS attacks, as demonstrated by the VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project...

DEBIAN-CVE-2010-1459

The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting XSS attacks, as demonstrated by the VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project...

Microsoft IIS4 Exair Sample Site Denial Of Service (CVE-1999-0449)

Microsoft Internet Information Services IIS is a multi-featured server product that ships with all versions of Microsoft Windows 2000, XP and Server 2003. The product provides FTP, SMTP, NNTP and HTTP services. The HTTP component, known as the WWW Publishing Service, allows for the serving of...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Blaze Apps 1.4.0.051909 Cross Site Scripting / SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a ASP .NET 2 Content Management System. It...

Blaze Apps - Multiple Vulnerabilities

Blaze Apps - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a AS...

Blaze Apps - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a ASP .NET 2 Content Management System. It...

Specialized Data Systems (SDS) SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vendor : Specialized Data Systems SDS Product : Parent Connect Version : 2010.04.11 tested, all versions presumed vulnerable URL : http://www.schooloffice.com/newweb/Items.aspx?catId=c22 Description from vendor website: "SDS ... brings to your...

DotNetNuke - Arbitrary File Upload

DotNetNuke - Arbitrary File Upload DotNetNuke Remote File upload Vulnerability Prodcut: DotNetNuke Home : www.DZ4All.cOm/Cc Vunlerability : Remote File upload Risk : High Dork : inurl:tabid/176/Default.aspx or inurl:portals/0/ Original discovery and credit goes to: Alireza Afzali of ISCN Team Fou...

eWebEditor 1.x Shell Upload

============================================================================= Tilte: eWebEditor v1.x WYSIWYG Remote File Upload . ============================================================================= Date....................: 22-05-2010 Author..................: Ma3sTr0-Dz Location...