4693 matches found
WEBSHELL hidden-vulnerability warning-the black bar safety net
1 % if request"shell"="dongxie" then % % end if % Inadded at your shell code Access when you do the hands and feet of the ASP files back plus? shell=dongxie For example:www. dongxie. cn/index. asp? action=dongxie You can tune out the webshell, does not affect the normal browsing. 2 The script is...
CVE-2005-3288
Mailsite Express is affected by CVE-2005-3288. Remote attackers can upload and execute files with executable extensions (e.g., ASP) by attaching the file via the compose page and then accessing it from the cache directory before saving or sending the message. The vulnerability is documented acros...
CVE-2005-3288
Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the "compose page" feature, then accessing the file from the cache directory before saving or sending the message...
On ASP+ACCESS prevention-vulnerability warning-the black bar safety net
Bored today,in the Baidu to find the next"ASP security",the result is found in N more than the invasion of the tutorial,and the security configuration information is relatively small. Between currently the majority of articles are to teach how the invasion of,here I will talk about,put yourself h...
Baidu VS Google-who is more powerful-bug warning-the black bar safety net
Remember once used Baidu to find the asp back door in the process! google, well known, famous world-class web search engine, and today, they worship in our domestic Baidu's feet, what it??? Don't believe that?? Don't believe it tell I see it! This was thanks to the cat the cat provides much...
ASP-Nuke伪造Cookie导致信息泄露漏洞
BugCVE: CVE-2002-0523 BUGTRAQ: 4489 ASP-Nuke存在设计问题，可导致攻击者获得主机相关敏感信息。 攻击者可以本地修改Cookie信息并提交，导致主机返回所有当前登陆用户列表或者返回包含WEB ROOT路径的错误信息。 攻击者可以利用这些信息进一步对系统进行攻击。 ASP-Nuke RC1-RC2 厂商补丁： ASP-Nuke -------- 目前厂商已经在最新版本的软件中修补了此漏洞，请到厂商的主页获取最新版本： http://www.asp-nuke.com/downloads.asp...
ASP-Nuke RC1 图象标记跨站脚本执行漏洞(CSS/XSS)
BugCVE: CVE-2002-0520 BUGTRAQ: 4475 ASP-Nuke对用户输入过滤上存在漏洞，可使远程攻击者利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。 ASP-Nuke支持在帖子中用户使用img//img标记插入图象连接，但它未对标记中的内容做充分过滤，这可能导致攻击者在此标记的内容中放入脚本代码，当其他用户浏览此相关链接的时候，脚本将在用户的浏览器中执行。攻击者可能借此得到用户基于Cookie的认证信息。 ASP-Nuke RC1 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 在漏洞修复之前暂时关闭Image标记的使用。...
mall23.txt
ORIGINAL LINK: http://systemsecure.org/ssforum/viewtopic.php?t=277 ------------------------------------- Ref: SS21092005 SYSTEMSECURE.ORG - Advisory/Exploit PUBLIC ADVISORY ------------------------------------- » Software: Mall23 » Link: http://www.mall23.com/ » Attacks: SQL Injection » Discovere...
File absolute path to access that support non-８ ０ port-vulnerability warning-the black bar safety net
Get the current asp implementation file where the absolute path support with port absolute path to/end in solving some ofXMLdocuments called useful． Or applied to the thief program, the program is as follows //poweredBy Airzen //qq:3 9 1 9 2 1 7 0 //e mail:[email protected] //date:2004-12-03 //repo...
Rational ClearQuest Cross-Site Scripting Vulnerability
Secunia Advisory: SA16717 Release Date: 2005-09-20 Critical: Less critical Impact: Cross Site Scripting Where: From local network Solution Status: Vendor Patch Software: Rational ClearQuest 2002 Rational ClearQuest 2003 Select a product and view a complete list of all Patched/Unpatched Secunia...
Web applications security vulnerabilities (PHP, ASP, CGI, Perl, etc)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
ASP/ASA Source Using Microsoft Translate f: bug (IIS 5.1)
Binary data 3212.prm...
Microsoft IIS Translate f: ASP/ASA Source Disclosure (IIS 5.1)
There is a serious vulnerability in IIS 5.1 that allows an attacker to view ASP/ASA source code instead of a processed file, when the files are stored on a FAT partition. ASP source code can contain sensitive information such as username's and passwords for ODBC connections. %NASLMINLEVEL 70300 C...
IIS 5.1 allows for remote viewing of source code on FAT/FAT32 volumes using WebDAV
It is possible to remotely view the source code of web script files though a specially crafted WebDAV HTTP request. Only IIS 5.1 seems to be vulnerable. The web script file must be on a FAT or a FAT32 volume, web scripts located on NTFS volumes are not vulnerable. Confirmed vulnerable -Microsoft®...
midicartInject.txt
Hello All, I have discovered a number of remote vulnerabilities in: MidiCart ASP Shopping Cart, Evaluation Version 7 & Standard & Pro Authors Site: http://www.midicart.com/ +-Examples:--------------------------------------------------+ 1------------------------------------------------------------...
Web applications security vulnerabilities (PHP, ASP, CGI, Perl, etc)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Web applications security vulnerabilities (PHP, ASP, CGI, Perl, etc)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Microsoft IIS 5.0 - 500-100.asp Server Name Spoof
Microsoft IIS 5.0 - 500-100.asp Server Name Spoof / ==================================================================================== || || || || || || || || || || ==================================================================================== Name: IIS 5.x and IIS 6.0 Server Name Spoof P...
Microsoft IIS 5.0 - '500-100.asp' Server Name Spoof
/ ==================================================================================== || || || || || || || || || || ==================================================================================== Name: IIS 5.x and IIS 6.0 Server Name Spoof PoC File: IIS5.xandIIS6.0ServerNameSpoof.c...
MS Windows IIS 5.0 (500-100.asp) Server Name Spoof Exploit
Exploit for unknown platform in category remote exploits ========================================================== MS Windows IIS 5.0 500-100.asp Server Name Spoof Exploit ========================================================== /...