CVE-2006-5927

Affected software: ASP Scripter Easy Portal 1.4 and Live Support 1.3. - Vulnerability: SQL injection in cpLogin.asp that allows remote attackers to execute arbitrary SQL commands via the Password parameter. - Root cause: improper handling of the Password parameter leading to SQL command injection...

ASP Smiley 1.0 (default.asp) Login ByPass SQL Injection Vulnerability

No description provided by source. Title : ASP Smiley v1.0 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0,0,0,0,0,0,0 from categories """"""""""""""""""""" ajann,Turkey ... Im not Hacker!...

Xtreme ASP Photo Gallery 2.0 - 'displaypic.asp?catname' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21138/info Xtreme ASP Photo Gallery is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues and an HTML-injection issue because the application fails to properly sanitize user-supplied input. Successf...

Xtreme ASP Photo Gallery 2.0 - 'displaypic.asp?sortorder' SQL Injection

source: https://www.securityfocus.com/bid/21138/info Xtreme ASP Photo Gallery is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues and an HTML-injection issue because the application fails to properly sanitize user-supplied input. Successf...

Asp Scripter Products (cpLogin.asp) Remote SQL ByPass Injection Vulnerability

Title : Asp Scripter Products cpLogin.asp Remote SQL ByPass Injection Vulnerability Author : ajann Products:: ASP Scripter Easy Portal v1.4 ASP Scripter Live Support v1.3 --------------------------------- http://target/path/LiveSupport/cpLogin.asp http://target/path/EasyPortal/cpLogin.asp Example...

ASPPortal-400.txt

Perl Script Decode: !/usr/bin/perl AspPortal Password Decrypter Get pass exploit.asp and this copy this window Speical Thanks To::: Nukedx ,For ASPPORTAL Decrypter ajann if@1 = 1 exploit; sub decrypt $lp = length$appass; $apkey =...

ASP Smiley 1.0 - default.asp Authentication Bypass SQL Injection

ASP Smiley 1.0 - default.asp Authentication Bypass SQL Injection Title : ASP Smiley v1.0 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0,0,0,0,0,0,0 from categories """"""""""""""""""""" ajann,Turkey ... Im...

Asp Scripter Products (cpLogin.asp) Remote SQL ByPass Injection Vulnerability

Title : Asp Scripter Products cpLogin.asp Remote SQL ByPass Injection Vulnerability Author : ajann Products:: ASP Scripter Easy Portal v1.4 ASP Scripter Live Support v1.3 --------------------------------- http://target/path/LiveSupport/cpLogin.asp http://target/path/EasyPortal/cpLogin.asp Example...

infinicart [ multiples injection sql & xss (post) ]

vendor site: http://www.ecommercemax.com/ product : infinicart bug: multiples injection sql & xss language : asp risk : high injection sql get: /infinicart-demo/browsegroup.asp?groupid=sql /infinicart-demo/addedtocart.asp?productid=sql /infinicart-demo/browsesubcat.asp?catid=sql...

infinicart.txt

vendor site: http://www.ecommercemax.com/ product : infinicart bug: multiples injection sql & xss language : asp risk : high injection sql get: /infinicart-demo/browsegroup.asp?groupid=sql /infinicart-demo/addedtocart.asp?productid=sql /infinicart-demo/browsesubcat.asp?catid=sql...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

ASP Smiley 1.0 (default.asp) Login ByPass SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== ASP Smiley 1.0 default.asp Login ByPass SQL Injection Vulnerability ===================================================================== Title : ASP Smiley v1.0...

Mega Mall [ multiples injection sql & full path disclosure ]

vendor site: http://products.kaonsoftwares.com/ product: mega-mall bug:injection sql & full path disclosure language: asp risk: high injection sql get: http://site.com/mega-mall/productreview.php?t=sql http://site.com/mega-mall/productreview.php?t=0&productId=sql...

megamallSQL.txt

vendor site: http://products.kaonsoftwares.com/ product: mega-mall bug:injection sql & full path disclosure language: asp risk: high injection sql get: http://site.com/mega-mall/productreview.php?t=sql http://site.com/mega-mall/productreview.php?t=0&productId=sql...

ASP Smiley 1.0 - 'default.asp' Authentication Bypass / SQL Injection

Title : ASP Smiley v1.0 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0,0,0,0,0,0,0 from categories """"""""""""""""""""" ajann,Turkey ... Im not Hacker! milw0rm.com 2006-11-14...

ASP Portal 2.03.x4.0 - Default1.asp SQL Injection

ASP Portal 2.03.x4.0 - Default1.asp SQL Injection source: https://www.securityfocus.com/bid/21039/info ASP Portal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting this issue could allow an...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Making free to kill ASP page Trojan-vulnerability warning-the black bar safety net

2 0 0 5 the year isfree to killtechnology by leaps and bounds in a year, more and more people are familiar with a simple PE filefree to killoperation. And the virus also is in the killing aspect of the lower foot has Kung Fu, so that the modified file becomes increasingly difficult. However,...

ASP Portal 2.0/3.x/4.0 - 'Default1.asp' SQL Injection

source: https://www.securityfocus.com/bid/21039/info ASP Portal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

ASPPortal 4.0.0 - default1.asp SQL Injection

ASPPortal 4.0.0 - default1.asp SQL Injection exploit1.asp 'Using : Write Target and ID after Submit Click 'Using : Tr:Alýnan Sifreyi Perl scriptinde cözün. 'Using : Tr:Scriptin Tr Dilinde bu exploitle bilgileri alamassiniz,manuel cekebilirsiniz 'Using : Tr:Kimsenin boyle yapicak kadar seviyesiz...