4693 matches found
ASP PortalApp Multiple SQL Injection
The remote host is running ASP PortalApp, a web application software written in ASP. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands, which could in turn be used to gain administrative access on the remote host. In addition, a path disclosure and...
PHP, ASP, CGI web applications security vulnerabilities
PHP inclusions, SQL injections, directory traversals, crossite scripting, etc...
CVE-2002-1603
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, , %2f encoded /, %20 encoded space, or %00 encoded null character, which returns the ASP source code unparsed...
CVE-2002-1603
CVE-2002-1603 affects GoAhead Web Server 2.1.7 and earlier: an attacker can obtain ASP source code by requesting a URL terminated with /, , %2f, %20, or %00, causing the ASP file to be returned unparsed. The issue is a data disclosure due to how the server handles certain URL terminations. The vu...
2 vulnerabilities in BetaParticle
BetaParticle bp is a ASP CMS Blog + Gallery . I found 2 vulnerabilities in BetaParticle. http://example.com/bp : is BP path ! 1 BP Database Disclosure For version 3.0 Database path : http://example.com/bp/database/dbBlogMX.mdb you can download it and disclose the administrator username and passwo...
NotifyLink contains multiple SQL injection vulnerabilities
Overview There are multiple vulnerabilities in NotifyLink that allow unauthenticated remote users to view or modify the contents of the NotifyLink SQL database. Possible modifications include the addition of unauthorized user and administrator accounts. Description Notify Technology NotifyLink...
PHP, ASP, CGI web applications security vulnerabilities
PHP inclusions, SQL injections, directory traversals, crossite scripting, etc...
vpasp.txt
VP-ASP Shopping Cart Version 5.0 Google style by fris Finding VP-ASP 5.00 Sites in Google: In google type: intitle:VP-ASP Shopping Cart 5.00 You will find many websites with VP-ASP 5.00 cart software installed Now lets goto the exploit the page will be like this:...
CVE-2004-1555
Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the 1 keywords parameter to search.asp, 2 handle parameter to profile.asp, 3 txtUserHandle parameter to reg2.asp or 4 txtUserEmail parameter to forgot.asp...
CVE-2004-1555
CVE-2004-1555 affects BroadBoard Instant ASP Message Board. The description documents multiple SQL injection flaws in the application, exploitable via specific parameters: keywords in search.asp, handle in profile.asp, txtUserHandle in reg2.asp, and txtUserEmail in forgot.asp. The underlying issu...
PHP/ASP/CGI web applications security bugs
PHP inclusions, SQL injections, directory traversals, crossite scripting, spam sending, etc...
CVE-2004-1400
The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unauthorized access via a direct request to main.asp...
CVE-2004-1401
SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and bypass authentication via the username parameter...
CVE-2004-1401
CVE-2004-1401 corresponds to a SQL injection in ASP-Rider’s verify.asp via the username parameter, allowing remote attackers to manipulate SQL and bypass authentication, potentially gaining administrative access. Affected software: ASP-Rider (ASP scripts). Root cause: improper input handling in v...
CVE-2004-1400
The vulnerability CVE-2004-1400 affects Ocean12 ASP Calendar. The public-facing control panel does not require authentication, permitting remote attackers to gain unauthorized access by requesting main.asp (and related admin paths). This unauthenticated access can enable attackers to perform priv...
PHP/ASP/CGI web applications security bugs
PHP inclusions, SQL injections, directory traversals, crossite scripting, etc...
PHP/ASP/CGI web applications security vulnerabilities
PHP inclusions, SQL injections, directory traversals, crossite scripting, etc...
bug report comersus Back Office Lite 6.0 and 6.0.1
Software: Comersus ASP Shopping Cart Version: 6.0 Free version containing BackOffice Lite 6.0 and 6.01 Vendor: Comersus 1. Software Description -------------------- Comersus ASP shopping cart is a set of ASP scripts creating an online shoppingcart. It works on a database of your own choosing,...