4695 matches found
CVE-2009-1322
CVE-2009-1322 affects ASP Product Catalog 1.0 where sensitive data is stored under the web root with insufficient access control. An attacker can directly request database/aspProductCatalog.mdb to download a database containing user credentials. The connected records confirm the presence of this ...
CVE-2009-1322
ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. VBulletin: crossite scripting...
ASP Product Catalog 1.0 XSS / Disclosure
!/usr/bin/perl By AlpHaNiX NullArea.Net alphaathacker.bz Made in Tunisia script : ASP Product Catalog Multiple Remote Exploits download : http://sourceforge.net/project/showfiles.php?groupid=136315 script homepage : http://aspprocatalog.sourceforge.net/ Vulnerable : XSS : In Search , Example :...
ASP Product Catalog 1.0 (XSS/DD) Multiple Remote Exploits
Exploit for unknown platform in category web applications ========================================================= ASP Product Catalog 1.0 XSS/DD Multiple Remote Exploits ========================================================= !/usr/bin/perl By AlpHaNiX NullArea.Net Made in Tunisia script : AS...
ASP Product Catalog 1.0 - Cross-Site Scripting File Disclosure
ASP Product Catalog 1.0 - Cross-Site Scripting File Disclosure !/usr/bin/perl By AlpHaNiX NullArea.Net alphaathacker.bz Made in Tunisia script : ASP Product Catalog Multiple Remote Exploits download : http://sourceforge.net/project/showfiles.php?groupid=136315 script homepage :...
ASP Product Catalog 1.0 - Cross-Site Scripting / File Disclosure
!/usr/bin/perl By AlpHaNiX NullArea.Net alphaathacker.bz Made in Tunisia script : ASP Product Catalog Multiple Remote Exploits download : http://sourceforge.net/project/showfiles.php?groupid=136315 script homepage : http://aspprocatalog.sourceforge.net/ Vulnerable : XSS : In Search , Example :...
FunkyASP AD System 1.1 Remote Shell Upload Vulnerability
No description provided by source. FunkyASP AD System v1.1 Remote Shell Upload script: http://www.funkyasp.co.uk/cats.asp?id=1¤cy=GBP ---------------------------------------------------------- Discovered By: ZoRLu Date: 04.04.2009 Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com...
phpwind7.0后台上传漏洞
漏洞产生的原因是跟很久以前的动网上传漏洞一样,没有考滤00这个字节,当我们把生成文件参数后面加上00时,phpwind就以为程序结束,然后就会直接生成我们想要的asp.有很多人问,能不能直接生成PHP呢,这个我也一直在试,但都是没有办法,因为PHP会把我们输入的一句话包含到单引号里面,这样我们的一句话就不能执行了,而ASP单引号不影响我们的执行,由于本人不懂PHP.所以不知道有没有其它的办法,希望本文丢拋字怎么打也打不出来砖引玉.让高手来解决这个问题。 phpwind7.0 暂无...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Openads: code execution...
CVE-2008-6673
asp/bslogin.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to 1 change the admin password via the cSaveAdminPW action; 2 modify site information, such as the contact address, via the saveAdmin; and 3 modify the site design...
CVE-2008-6677
In CVE-2008-6677, Unrestricted file upload in QuickerSite 1.8.5 (fckeditor251/editor/filemanager/connectors/asp/upload.asp) allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request. This is supported by multiple ...
SASPCMS 0.9 XSS / SQL Injection / Disclosure
www.BugReport.ir AmnPardaz Security Research Team Title: SASPCMS Multiple Vulnerabilities Vendor: http://www.lgasoft.com Vulnerable Version: 0.9 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: SASPCMS is an ASP Content Management System . SASPCMS witc...
saspcms 0.9 - Multiple Vulnerabilities
saspcms 0.9 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: SASPCMS Multiple Vulnerabilities Vendor: http://www.lgasoft.com Vulnerable Version: 0.9 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: SASPCMS is an ASP...
saspcms 0.9 - Multiple Vulnerabilities
www.BugReport.ir AmnPardaz Security Research Team Title: SASPCMS Multiple Vulnerabilities Vendor: http://www.lgasoft.com Vulnerable Version: 0.9 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: SASPCMS is an ASP Content Management System . SASPCMS witc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger: information leakage, protection bypass, unauthorized access...
Ftbbs7. 1 static GBK version 0day-vulnerability warning-the black bar safety net
conn. asp wood has done anti-injected into the, ftbbsmyinfo. asp and JB to an injection,a perfect match.. Posted on ftbbsmyinfo. asp source code: ASP/Visual Basic code 0 1.& lt;% 0 2. postuserid=request. QueryString”postuserid” 0 3. ftbbsuser=request. QueryString”ftbbsuser” 0 4. call FTBBSHTMLMBf...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. RotaBanner: crossite scripting...