4695 matches found
CVE-2007-5260
ASP-CMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request for mdb-database/ASP-CMSv100.mdb...
CVE-2007-5260
ASP-CMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request for mdb-database/ASP-CMSv100.mdb...
CVE-2007-5260
ASP-CMS 1.0 stores sensitive information under the web root with insufficient access control, allowing remote attackers to download the database (mdb-database/ASP-CMS_v100.mdb) containing usernames and passwords. The available sources describe this exposure but do not provide exploitation steps o...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Sql injection
SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter and possibly other parameters...
CVE-2007-5220
SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter and possibly other parameters...
CVE-2007-5220
The CVE-2007-5220 entry concerns an SQL injection vulnerability in catalog.asp of the ASP Product Catalog. The affected component is the catalog.asp endpoint, with the cid parameter (and possibly other parameters) as the injection vector. The underlying issue allows remote attackers to execute ar...
CVE-2007-5220
SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter and possibly other parameters...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
aspcms-mdb.txt
ASP-CMS version 1 default password location. http://asp-cms.sourceforge.net/ A vulnerability exists within the content management system ASP-CMS that allows a remote user to see the username and password of the content management system itsself. the user/pass combo along with all the other settin...
ASP-CMS version 1 default password location.
ASP-CMS version 1 default password location. http://asp-cms.sourceforge.net/ A vulnerability exists within the content management system ASP-CMS that allows a remote user to see the username and password of the content management system itsself. the user/pass combo along with all the other settin...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
ASP Product catalog SQL injection vulnerability
ASP Product catalog SQL injection vulnerability. A nice little SQL injection vulnerability exists within ASP Product Catalog. The application fails to check for bad input from GET'd variables used in SQL query operations. In this case, the variable cid can be used for SQL injection queries...
Session fixation
Session fixation vulnerability in Aipo and Aipo ASP 3.0.1.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors...
CVE-2007-5154
Session fixation vulnerability in Aipo and Aipo ASP 3.0.1.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
CVE-2007-5154
Aipo (Aimluck, Inc.) and Aipo ASP 3.0.1.0 and earlier are affected by a session fixation vulnerability. The issue allows an attacker to impersonate a user by obtaining or forcing a valid session ID, enabling potentially privileged actions once the user logs in. The JVN entry describes risk as use...
CVE-2007-5154
Session fixation vulnerability in Aipo and Aipo ASP 3.0.1.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors...
aspcatalog-sql.txt
ASP Product catalog SQL injection vulnerability. A nice little SQL injection vulnerability exists within ASP Product Catalog. The application fails to check for bad input from GET'd variables used in SQL query operations. In this case, the variable cid can be used for SQL injection queries...