Lucene search
+L

4695 matches found

myhack58
myhack58
added 2008/12/27 12:0 a.m.16 views

How to put asp Backdoor-vulnerability warning-the black bar safety net

asp back door method of placing one of the asp Injection。 Look at Figure one: ! This is my rack in the machine of a network article management of the landing page, and the usual no different, the original features are present. Then look at the second figure: ! Compare: Figure 1 The url is...

7.7AI score
SaveExploits0
securityvulns
securityvulns
added 2008/12/26 12:0 a.m.49 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

6.8CVSS1.5AI score0.06738EPSS
SaveExploits0References3Affected Software2
securityvulns
securityvulns
added 2008/12/23 12:0 a.m.64 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. NetCat CMS: directory traversal, SQL injection...

10CVSS1.5AI score0.58637EPSS
SaveExploits15References4Affected Software4
securityvulns
securityvulns
added 2008/12/22 12:0 a.m.24 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger: crossite scripting, DoS...

2.1AI score
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
added 2008/12/22 12:0 a.m.24 views

Pre ASP Job Board SQL Injection

PRE Asp Job Board Auth Bypass/DD Multiple Remote Vulns. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com dork: bende bilmiyorum arkadaslar olunca zaten bildiriyorum lutfen sormayIn ý dont know dork. pls you dont...

SaveExploits0
Packet Storm
Packet Storm
added 2008/12/22 12:0 a.m.22 views

Pre Simply Gallery SQL Injection

Pre Simple Gallery ASP Script SQL/DD Multiple Remote Vulns. script: http://preproject.com/projectDetail.asp?projectID=213 ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com dork: bende bilmiyorum arkadaslar olunca...

0.4AI score
SaveExploits0
NVD
NVD
added 2008/12/19 6:30 p.m.20 views

CVE-2008-5693

Ipswitch WSFTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character...

5CVSS6.4AI score0.0454EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2008/12/19 6:0 p.m.26 views

CVE-2008-5693

Ipswitch WSFTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character...

6.4AI score0.0454EPSS
SaveExploits0References6
Packet Storm
Packet Storm
added 2008/12/17 12:0 a.m.20 views

Pre ASP Classifieds Database Disclosure

PRE ASP Classifieds pclasp.mdb Database Disclosure Vuln --------------------------------------------------------- Portal Name: PRE ASP Classifieds Vendor : http://preproject.com/businesslisting.asp Author : PouyaServer , [email protected] Vulnerability : DD...

SaveExploits0
NVD
NVD
added 2008/12/16 7:7 p.m.12 views

CVE-2008-5605

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the 1 ItemID parameter to classifieds.asp and the 2 ID parameter to Events.asp...

7.5CVSS8.5AI score0.02082EPSS
SaveExploits1References5
NVD
NVD
added 2008/12/16 7:7 p.m.19 views

CVE-2008-5608

ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb...

5CVSS6.3AI score0.0285EPSS
SaveExploits2References4
NVD
NVD
added 2008/12/16 7:7 p.m.15 views

CVE-2008-5595

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter...

7.5CVSS8.4AI score0.01151EPSS
SaveExploits2References6
Prion
Prion
added 2008/12/16 7:7 p.m.14 views

Sql injection

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter...

7.5CVSS9.1AI score0.01151EPSS
SaveExploits2References6
Prion
Prion
added 2008/12/16 7:7 p.m.11 views

Sql injection

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the 1 ItemID parameter to classifieds.asp and the 2 ID parameter to Events.asp...

7.5CVSS9.3AI score0.02082EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2008/12/16 6:0 p.m.23 views

CVE-2008-5608

ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb...

6.3AI score0.0285EPSS
SaveExploits2References4
CVE
CVE
added 2008/12/16 6:0 p.m.53 views

CVE-2008-5595

The CVE-2008-5595 entry describes a SQL injection vulnerability in detail.asp of the ASP AutoDealer application. The flaw allows remote attackers to execute arbitrary SQL commands by supplying a crafted ID parameter, enabling access or manipulation of the underlying database as described in the v...

7.5CVSS8.4AI score0.01151EPSS
SaveExploits2References6Affected Software1
CVE
CVE
added 2008/12/16 6:0 p.m.46 views

CVE-2008-5601

CVE-2008-5601 – Normal mode Affected software: User Engine Lite ASP. Vulnerability: The application stores sensitive information under the web root with insufficient access control, allowing remote attackers to download the database file (users.mdb) via a direct request. Impact: Exposure of the d...

5CVSS6.3AI score0.02615EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2008/12/16 6:0 p.m.49 views

CVE-2008-5608

CVE-2008-5608 affects ASP AutoDealer where sensitive data is stored under the web root and is not properly access-controlled. The underlying issue is direct access to the web-root file auto.mdb, enabling remote attackers to download the database file via a direct request. The available connected ...

5CVSS6.3AI score0.0285EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2008/12/16 6:0 p.m.44 views

CVE-2008-5605

CVE-2008-5605 concerns multiple SQL injection vulnerabilities in the ASP Portal. The affected components are the pages involved in classifieds.asp (ItemID parameter) and Events.asp (ID parameter). The underlying issue is that user-supplied input is used in SQL without proper validation or paramet...

7.5CVSS8.5AI score0.02082EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2008/12/16 6:0 p.m.23 views

CVE-2008-5595

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter...

8.4AI score0.01151EPSS
SaveExploits2References6
Rows per page
Query Builder