Lucene search
+L

4695 matches found

securityvulns
securityvulns
added 2009/03/28 12:0 a.m.31 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Webglimpse: crossite scripting...

1.5AI score
SaveExploits0References4Affected Software2
myhack58
myhack58
added 2009/03/27 12:0 a.m.23 views

Looking for a asp Backdoor Trojan, write an asp Backdoor Trojan-exploit-warning-the black bar safety net

I waited for the side dishes yourself not write to asp of the horse, only with prawns to write, but the online streaming of all don't know is a few hands. It is inevitable that some ill-intentioned people will be on the inside plus the back door. Finally get to a shell and be someone stole how...

7.5AI score
SaveExploits0
NVD
NVD
added 2009/03/25 6:30 p.m.22 views

CVE-2008-6527

SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter...

7.5CVSS8.4AI score0.01103EPSS
SaveExploits2References3
CVE
CVE
added 2009/03/25 6:0 p.m.56 views

CVE-2008-6527

CVE-2008-6527 is a SQL injection vulnerability in GO4I.NET ASP Forum 1.0, specifically in forum.asp via the iFor parameter. Remote attackers can execute arbitrary SQL commands; impact includes partial confidentiality, integrity, and availability with network access and no authentication. Public r...

7.5CVSS8.7AI score0.01103EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2009/03/25 6:0 p.m.27 views

CVE-2008-6527

SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter...

8.4AI score0.01103EPSS
SaveExploits2References3
securityvulns
securityvulns
added 2009/03/24 12:0 a.m.33 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

7.5CVSS1.5AI score0.02594EPSS
SaveExploits1References4Affected Software4
securityvulns
securityvulns
added 2009/03/21 12:0 a.m.29 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Invision Power Board: user existance check...

2.2AI score
SaveExploits0References1Affected Software2
Prion
Prion
added 2009/03/20 6:30 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI...

4.3CVSS6.2AI score0.01445EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2009/03/20 6:0 p.m.25 views

CVE-2008-6500

Cross-site scripting XSS vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI...

5.7AI score0.01445EPSS
SaveExploits2References3
CVE
CVE
added 2009/03/20 6:0 p.m.47 views

CVE-2008-6500

CVE-2008-6500 describes a cross-site scripting (XSS) vulnerability in the CodeToad ASP Shopping Cart Script. The issue allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI. The primary affected component is the shopping cart script’s handling of q...

4.3CVSS5.9AI score0.01445EPSS
SaveExploits2References3Affected Software1
NVD
NVD
added 2009/03/20 12:30 a.m.19 views

CVE-2008-6494

ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb...

5CVSS6.3AI score0.02229EPSS
SaveExploits1References2
Prion
Prion
added 2009/03/20 12:30 a.m.13 views

Improper access control

ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb...

5CVSS6.9AI score0.02229EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2009/03/20 12:0 a.m.24 views

CVE-2008-6494

ASP User Engine.NET stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for users.mdb...

6.3AI score0.02229EPSS
SaveExploits1References2
CVE
CVE
added 2009/03/20 12:0 a.m.47 views

CVE-2008-6494

The CVE-2008-6494 entry concerns ASP User Engine.NET, where sensitive data is stored under the web root with insufficient access control. The underlying issue allows a remote attacker to download the database (users.mdb) by issuing a direct request. This is supported by the NVD description and as...

5CVSS6.5AI score0.02229EPSS
SaveExploits1References2Affected Software1
securityvulns
securityvulns
added 2009/03/17 12:0 a.m.24 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

1.5AI score
SaveExploits0References3Affected Software4
OpenVAS
OpenVAS
added 2009/03/16 12:0 a.m.50 views

Microsoft IIS MS03-018 Security Check

A Cross-Site ScriptingXSSvulnerability affecting IIS 4.0, 5.0 and 5.1 involving the error message that SPDX-FileCopyrightText: 2009 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

10CVSS6.5AI score0.40661EPSS
SaveExploits3References5
securityvulns
securityvulns
added 2009/03/15 12:0 a.m.24 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger: DoS against user's account and server...

2.1AI score
SaveExploits0References5Affected Software5
securityvulns
securityvulns
added 2009/03/12 12:0 a.m.117 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PHPSlideshow: crossite scripting. Athree CMS: information leak, SQL injection, DoS...

6.8CVSS1.8AI score0.06315EPSS
SaveExploits5References10Affected Software9
securityvulns
securityvulns
added 2009/03/09 12:0 a.m.32 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PHPSlideshow: crossite scripting...

2.1AI score
SaveExploits0References10Affected Software9
securityvulns
securityvulns
added 2009/03/04 12:0 a.m.30 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

1.5AI score
SaveExploits0References7Affected Software6
Rows per page
Query Builder