A Better Member-Based ASP Photo Gallery - entry SQL Injection

A Better Member-Based ASP Photo Gallery - entry SQL Injection Script:A Better Member-Based ASP Photo Gallery Download: http://www.ontarioabandonedplaces.com/ipguardian/ABetterMemberBasedASPPhotoGallery.zip Demo: www.ontarioabandonedplaces.com/ipguardian/gallery...

A Better Member-Based ASP Photo Gallery - 'entry' SQL Injection

Script:A Better Member-Based ASP Photo Gallery Download: http://www.ontarioabandonedplaces.com/ipguardian/ABetterMemberBasedASPPhotoGallery.zip Demo: www.ontarioabandonedplaces.com/ipguardian/gallery...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. WP-Upload Manager 1.0: SQL injection, crossite scripting...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. E107: обход CAPTCHA, межсайтовый скриптинг...

ASP-Dev XM Event Diary Multiple Vulnerabilities

The host is running ASP-Dev XM Events Diary and prone to multiple vulnerabilities. Vulnerabilities Insight: - Input passed to the 'cat' parameter in 'default.asp' and 'diaryviewC.asp' are not properly sanitised before being used in SQL queries. - Insufficient access control to the database file...

ASP-Dev XM Event Diary Multiple Vulnerabilities

ASP-Dev XM Events Diary is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-0280

CVE-2009-0280 affects Asp Project Management 1.0 . The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the crypt cookie to 1. The provided documents do not include explicit remediation details or patched versions.

CVE-2009-0280

Asp Project Management 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the crypt cookie to 1...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CVE-2008-5951

ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for workDB/templatemonster.mdb...

CVE-2008-5950

SQL injection vulnerability in media/medialevel.asp in ASP Template Creature allows remote attackers to execute arbitrary SQL commands via the mcatid parameter...

Sql injection

SQL injection vulnerability in media/medialevel.asp in ASP Template Creature allows remote attackers to execute arbitrary SQL commands via the mcatid parameter...

Improper access control

ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for workDB/templatemonster.mdb...

CVE-2008-5950

SQL injection vulnerability in media/medialevel.asp in ASP Template Creature allows remote attackers to execute arbitrary SQL commands via the mcatid parameter...

CVE-2008-5951

The CVE-2008-5951 entry concerns ASP Template Creature, where sensitive information is stored under the web root with insufficient access control. This allows remote attackers to download the database file via a direct request for workDB/templatemonster.mdb, exposing partial confidentiality (per ...

CVE-2008-5950

CVE-2008-5950 is a SQL injection vulnerability in media/media_level.asp in ASP Template Creature. The vulnerability allows remote attackers to execute arbitrary SQL commands via the mcatid parameter. According to NVD, the CVSS v2 base score is 7.5 (HIGH) with NETWORK attack vector and low complex...

CVE-2008-5951

ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for workDB/templatemonster.mdb...

asp-project 1.0 Insecure Cookie Use

Asp-project Cookie Handling AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://ircrash.com My Official WebSite : http://r3dw0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download :...