4695 matches found
DUcalendar 1.0 - 'iEve' SQL Injection
DUcalendar v 1.0 detail.asp?iEve= Remote SQL Inection Exploit + Script : DUcalendar + Version : 1.0 Maybe others + Exploit : Remote SQL Injection + Script URL : http://www.codedworld.com/download/ducalendar-/545.html + Description : 'Free Event Calendar written in ASP. Features include unlimited...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
World horse ASP receiving program vulnerability-vulnerability warning-the black bar safety net
Recently read an octal Forum on the against the Bole of the ASP receiving the program's vulnerability analysis, through the submission of data to obtain webshell. Just have a friend let me take a look at the world of horses submitted questions! Mainly due to some programs the user to customize so...
CVE-2008-2775
SQL injection vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to execute arbitrary SQL commands via the searchFor parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
AspWebCalendar 2008 Remote File Upload Vulnerability
No description provided by source. Title:AspWebCalendar 2008 Remote File Upload Vulnerability Discovered by : AleminKrali Dork :calendar.asp?eventdetail http://site.com/path/calendaradmin.asp?action=uploadfile == upload your Asp shell http://site.com/path/calendar/eventimages/yourshell.asp == you...
Play a game of webshell game-bug warning-the black bar safety net
To hack the x-Files cast a draft, two months, and haven't selected, and now it sends to the Just look at it, the article is bad, Don't laugh,the picture is zoom out, tap the picture you can see the big picture. Play a game of webshell game The desert（baiker2008 Now many of the side dishes, speaki...
doITlive CMS <= 2.50 (SQL Injection/XSS) Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: doITlive CMS =2.50 SQL Injection/XSS Multiple Vulnerabilities Vendor: www.doitlive.com Vulnerable Version: 2.50 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...
CVE-2008-2756
Cross-site scripting XSS vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter and other unspecified parameters. NOTE: some of these details are obtained from third party information...
CVE-2008-2764
Cross-site scripting XSS vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors "all fields"...
doITlive CMS <= 2.50 (SQL Injection/XSS) Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: doITlive CMS =2.50 SQL Injection/XSS Multiple Vulnerabilities Vendor: www.doitlive.com Vulnerable Version: 2.50 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...
doitlivecms-sqlxss.txt
www.BugReport.ir AmnPardaz Security Research Team Title: doITlive CMS =2.50 SQL Injection/XSS Multiple Vulnerabilities Vendor: www.doitlive.com Vulnerable Version: 2.50 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/43 1. Description: User friend...
doITlive CMS <= 2.50 (SQL Injection/XSS) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ================================================================= doITlive CMS = 2.50 SQL Injection/XSS Multiple Vulnerabilities ================================================================= AmnPardaz Security Research Team Title:...
doITlive CMS 2.50 - SQL Injection / Cross-Site Scripting
www.BugReport.ir AmnPardaz Security Research Team Title: doITlive CMS =2.50 SQL Injection/XSS Multiple Vulnerabilities Vendor: www.doitlive.com Vulnerable Version: 2.50 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/43 1. Description: User friend...
By FTP for breakthrough IP filtering-vulnerability warning-the black bar safety net
quote site exec "cacls.exe d: /e /t /g everyone:F" msgstr "" put the d drive set to everyone can browse such a export file on the D drive you can download a... quote site exec "regedit-e D:\1.reg HKEYLOCALMACHINE\SYSTEM\ControlSet001\Services\Tcpip" Export Registry in about the TCP/IP Filter of t...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Unfixed XSS vulnerability at www.stegcomputer.ch
Security researcher Trii, has submitted on 16/06/2008 a cross-site-scripting XSS vulnerability affecting www.stegcomputer.ch, which at the time of submission ranked 49795 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is current...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger - information leak, crossite scripting. Simple Machines - crossite scripting...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
aspdownload-bypass.txt
\ ASPDownload v 1.03 Remote Admin Bypass Exploit / \ / / + Author : Underz0ne Crew + Script : ASPDownload v 1.03 + Risk : High + Script URL : http://www.toddwoolums.com/aspdownload.asp + Dork : Powered by AspDownload --//-- Exploit Area : + Description : The problem is that the script's owner...