CVE-2010-1588

CVE-2010-1588 affects Rocksalt International VP-ASP Shopping Cart (version 6.50 and earlier). The vulnerability is a SQL injection in the Getwebsess function (shopsessionsubs.asp) that allows an attacker to modify the websess parameter to execute arbitrary SQL commands. Impact is described as par...

CVE-2010-1589

The CVE-2010-1589 entry concerns Rocksalt International VP-ASP Shopping Cart, version 6.50 and earlier, with a directory traversal vulnerability in shopsessionsubs.asp. The issue arises from manipulation of the REMOTE_HOST (DNS hostname) variable, linked to CookielessGenerateFilename and Cookiele...

WebEssence 1.0.2 Cross Site Scripting / SQL Injection

WebEssence 1.0.2 Multiple Vulnerabilities Bugs found by whitesheep, R00TATI and epicfail for Debug|Track session @ Backtrack|italia community conference www.backtrack.it XSS PoC: http://localhost/webessence/webessence/oembed.php?url=http://google.com&id=alert'Backtrack|it'; In "url" variable is...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

webessence 1.0.2 - Multiple Vulnerabilities

webessence 1.0.2 - Multiple Vulnerabilities WebEssence 1.0.2 Multiple Vulnerabilities Bugs found by whitesheep, r00t and epicfail for Debug|Track session @ Backtrack|italia community conference www.backtrack.it XSS PoC:...

WebEssence 1.0.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================= WebEssence 1.0.2 Multiple Vulnerabilities ========================================= WebEssence 1.0.2 Multiple Vulnerabilities XSS PoC:...

webessence 1.0.2 - Multiple Vulnerabilities

WebEssence 1.0.2 Multiple Vulnerabilities Bugs found by whitesheep, r00t and epicfail for Debug|Track session @ Backtrack|italia community conference www.backtrack.it XSS PoC: http://localhost/webessence/webessence/oembed.php?url=http://google.com&id=alert'Backtrack|it'; In "url" variable is...

The modified mdb to asp the consequences-vulnerability warning-the black bar safety net

by:SuperHei·Lilo May be with the network security technology development., the administrator of the qualities are on the increase, when using access+asp system, not the database being downloaded to the mdb to asp or asa. The first does not say directly change the suffix, you can directly use the...

Mihao8 CMS Cross Site Scripting

Title:Mihao8 CMS Multiple XSS Vulnerabilities Author£ºriuskskȪ¸ç Blog£ºhttp://riusksk.blogbus.com Data£º2010-4-23 =====================================================0x1======================================================================...

IIS can be PUT, but can not MOVE of reason-vulnerability warning-the black bar safety net

Today in the test IIS put vulnerability, found can put all IIS can't parse the file, the move is also normal, but it can not move as asp, asa and other IIS can parse the file, search the Internet for some articles, found is because the IIS configuration is not selected on the“script resource...

Core Security Technologies Advisory 2010.0406

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory Information Title: User Invoices Persistent XSS Vulnerability in CactuShop Advisory Id: CORE-2010-0406...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CORE-2010-0406 - User Invoices Persistent XSS Vulnerability in CactuShop

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory Information Title: User Invoices Persistent XSS Vulnerability in CactuShop Advisory Id: CORE-2010-0406...

User Invoices Persistent XSS Vulnerability in CactuShop

Exploit for asp platform in category web applications ======================================================= User Invoices Persistent XSS Vulnerability in CactuShop ======================================================= User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory...

CactuShop - User Invoices Persistent Cross-Site Scripting

CactuShop - User Invoices Persistent Cross-Site Scripting User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory Information Title: User Invoices Persistent XSS Vulnerability in CactuShop Advisory Id: CORE-2010-0406 Advisory URL:...

CactuShop - User Invoices Persistent Cross-Site Scripting

User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory Information Title: User Invoices Persistent XSS Vulnerability in CactuShop Advisory Id: CORE-2010-0406 Advisory URL: http://www.coresecurity.com/content/cactushop-xss-persistent-vulnerability Date published: 2010-04-20 Date of la...

Ding Feng enterprises smart built Station system injection search injection vulnerability analysis and exploit-vulnerability warning-the black bar safety net

Author: Mo if you are asked Version: Ding Feng enterprises smart built Station system ASP version V0. 3. 6 Yesterday the use of this system to get a webshell, but is the use of download the default database, the latter the discoverer of the system interface's also good, by the look of IT security...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Wind crossing technology ASP online shopping system 0 9 0 5-1 injection vulnerability-vulnerability warning-the black bar safety net

Wind crossing technology ASP online shopping system 0 9 0 5-1 Multi-file exists injection vulnerability Relates to document: proshow. asp, new. asp and the like. ! Size: 132.91 K Size: 5 0 0 x 3 9 1 Browse: 0 times Click to open a new window to browse the full map! Size: 88.01 K Size: 5 0 0 x 3 9...

Worry-free shopping system oday released-vulnerability warning-the black bar safety net

Actually code appear in a number of SQLintection, but in the Conn. asp: Set Conn = Nothing Response. Write "database connection error" Response. End End If %!-- include file="sqlcheck. asp" - Opened sqlcheck. the asp,part of the code is as follows: For Fyx=0 to uboundFyCs If FyCsFyx"" Then If...