CVE-2008-5923

SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat parameter...

CVE-2008-5926

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...

CVE-2008-5925

ASP-Dev XM Events Diary has a partial-access control weakness that exposes the diary.mdb database under the web root, allowing remote retrieval via a direct request. Affected component is the diary database/file handling within the web app; underlying issue is insufficient access control leading ...

CVE-2008-5924

SQL injection vulnerability in diaryviewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-5925

ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb...

DS-IPN Paypal Shop Database Disclosure

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger: SQL injection, DoS...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

DS-IPN.NET Digital Sales IPN - Database Disclosure

DS-IPN.NET Digital Sales IPN - Database Disclosure -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || ||...

DS-IPN.NET Digital Sales IPN Database Disclosure Vulnerability

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

ASP Action Calendar 1.3 SQL Injection

Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : D-unit & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : www.warrenstudios.com --------------------------------------------------------- Exploit Auth...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. e-Vision CMS: crossite scripting...

ASP ActionCalendar 1.3 - Authentication Bypass

ASP ActionCalendar 1.3 - Authentication Bypass Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : D-unit & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : www.warrenstudios.com...

The Walking Club (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== The Walking Club Auth Bypass SQL Injection Vulnerability ========================================================== Author : ByALBAYX The Walking Club Auth Bypass Script : The...

ASP ActionCalendar v.1.3 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : D-unit & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : www.warrenstudios.com...

blogit! - SQL Injection File Disclosure Cross-Site Scripting

blogit! - SQL Injection File Disclosure Cross-Site Scripting --------------------------------------------------------- Portal Name: BlogIt! Download : http://www.katywhitton.com/downloads/BlogIt!/BlogItDL.zip Author : PouyaServer , [email protected] Vulnerability : SQL/DD/XSS...

ASP ActionCalendar v.1.3 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== ASP ActionCalendar v.1.3 Auth Bypass SQL Injection Vulnerability ================================================================== Founded By : SuB-ZeRo WaLiD...

ASP ActionCalendar 1.3 - Authentication Bypass

Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : D-unit & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : www.warrenstudios.com --------------------------------------------------------- Exploit Auth...

Virtual GuestBook 2.1 Remote Database Disclosure Vulnerability

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Virtual GuestBook 2.1 Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== Virtual GuestBook 2.1 Remote Database Disclosure Vulnerability ============================================================== -----------------------------I AM MUSLIM...