Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Concave Yaya news publishing system WebBasicInfo. asp administrator privileges unauthenticated vulnerability-vulnerability warning-the black bar safety net

Found by:skerwww. zerobox. org The affected version Concave Yaya news publishing system 4. 7ACC version Other version not tested Vulnerability description Concave Yaya news publishing system is an ASP program in conjunction with the ACC and MYSQL CMS system Vulnerability is the path where the...

The use of the picture behind a link hidden hung it.-vulnerability warning-the black bar safety net

I also don't know dove gray is what the time, the mesh horse is very popular, and when I finally know the Dove gray is what time, Pirates of the QQ software in the use of the mailbox the received the letter, and when I use dove gray successful on-line and caught the first broilers of the time, th...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Webglimpse: information leak, crossite scripting, directory traversal, authentication bypass...

凹丫丫新闻发布系统WebBasicInfo.asp管理员权限未验证漏洞

凹丫丫新闻发布系统是一款ASP程序结合ACC和MYSQL的CMS系统 漏洞所在路径地址admin/WebBasicInfo.asp 程序员未对该页面写入管理员权限验证代码,可以直接输入代码绕过进入网站后台 进入WebBasicInfo.asp可以对网站名称,网站关键字,网站介绍,底部版权信息进行修改. 可以关闭公告.评论.友情连接功能 凹丫丫新闻发布系统4.7ACC版 其他版本还未测试 等待官方补丁程序或者自己编译管理员权限验证代码...

Old A horse black method-vulnerability warning-the black bar safety net

Originally when the default database is ASP, plug horses, cross-site, and inject all there The way injection: showmb. asp % Set conn = Server. CreateObject"ADODB. Connection" conn. open "Provider = Microsoft. Jet. OLEDB. 4. 0;Data Source = " & Server. MapPath"laoa123qafd5q. asp" set rs = server...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Design/Logic Flaw

Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request...

CVE-2008-6739

Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request...

CVE-2008-6739

CVE-2008-6739 affects Todd Woolums ASP Download management script 1.03. The issue is that setupdownload.asp does not require authentication, allowing a remote attacker to obtain administrator privileges via a direct request. The documented impact is elevation to administrator access, with exploit...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CVE-2009-1321

Cross-site scripting XSS vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2009-1322

ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb...

Cross site scripting

Cross-site scripting XSS vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2009-1321

Cross-site scripting XSS vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2009-1321

CVE-2009-1321 is an XSS vulnerability in ASP Product Catalog 1.0's search.asp, exploitable via the keywords parameter to inject arbitrary script/HTML. The issue stems from unsanitized input in the search function, enabling remote attackers to affect victims’ browsers. CVSS 2.0 base score 4.3 (MED...