CVE-2008-5274

CVE-2008-5274 affects Todd Woolums ASP News Management 2.2. The vulnerability allows remote attackers to obtain news items via direct requests to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp). The underlying issue is information disclosure through access to these pages, resulting in par...

BaSiC-CMS (acm2000.mdb) Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ BaSiC-CMS acm2000.mdb Remote Database Disclosure Vulnerability ================================================================...

Basic-CMS - Remote Database Disclosure

Basic-CMS - Remote Database Disclosure --------------------------------------------------------- Portal Name: Basic-cms ASP D0wn : http://www.basic-cms.com/download-basiccms.zip Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability...

Web Calendar System 3.123.30 - Multiple Vulnerabilities

Web Calendar System 3.123.30 - Multiple Vulnerabilities 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. CoBreeder: Crossite scripting...

Comersus ASP Shopping Cart (DD/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Comersus ASP Shopping Cart DD/XSS Multiple Remote Vulnerabilities ===================================================================...

Comersus ASP Shopping Cart - File Disclosure / Cross-Site Scripting

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

Comersus ASP Shopping Cart - File Disclosure Cross-Site Scripting

Comersus ASP Shopping Cart - File Disclosure Cross-Site Scripting 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. CoBreeder: Crossite scripting...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Webglimpse: crossite scripting. CimWebCenter: crossite scripting...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Webglimpse: crossite scripting. CimWebCenter: crossite scripting...

qshop-sqlxss.txt

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

Q-Shop 3.0 Remote XSS/SQL Injection Vulnerabilities

No description provided by source. 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 ...

Q-Shop 3.0 Remote XSS/SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =================================================== Q-Shop 3.0 Remote XSS/SQL Injection Vulnerabilities =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Osmotic pre-Flash to get shell shortcut/Ewebeditor/ASP/ASPX/PHP the version of vulnerability-vulnerability warning-the black bar safety net

Recent thinking from the new writing blog, I always take someone else's stuff posted Today in the blog on yourself to write something, nothing technical content, even if a summary. Hope the newbies some help, the cattle people to the table to laugh at me, huh? ewebeditor, believe play the Black...

Q-Shop 3.0 - Cross-Site Scripting SQL Injection

Q-Shop 3.0 - Cross-Site Scripting SQL Injection 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Fusebox Framework: crossite scripting...

Oblog some finishing-vulnerability warning-the black bar safety net

1, Display, help/hmain. htm content, format: http://test/blog/userhelp.asp?file=help/hwhatblog.htm if replaced with asp files not be displayed? From the code can be seen, not allowed to read the extension of the asp file, but the extension is not limited, we only want the asp file content, window...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. CimWebCenter: crossite scripting, informationleakage...

aspforum-sql.txt

Bl@ckbe@rD 'Tunisian TerrorisT' ===================== ----------------------------------------------------------------------------------- + Script Name : Asp Forum v1.0 Rem0te SQL Injection EXploit + Author : Bl@ckbe@rD 'Tunisian TerrorisT' + Contact : blackbeard-sqlA.Thotmail.fr + Home :...