Remote code execution

PHICOMM K2PSG1218 devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; alternatively, the attacker can leverage unauthenticated access to this script to trigger a reboot via an ifType=reboot action...

CVE-2017-11495

CVE-2017-11495 affects PHICOMM K2 (PSG1218) devices with firmware versions 22.5.11.5 and earlier. Multiple connected sources confirm an unauthenticated remote code execution vulnerability accessible via an unspecified ASP script, with a secondary exploit path where unauthenticated access to that ...

renovationexperts.com XSS vulnerability

Vulnerable URL: http://www.renovationexperts.com/startproject2.asp?visitid=0=startprojectv3=1"...

parkco.org XSS vulnerability

Vulnerable URL: http://www.parkco.org/prop2.asp?ScheduleNumber=1"...

eluna.com XSS vulnerability

Vulnerable URL: http://www.eluna.com/rest/RestaurantsNew2.asp?rest=1"...

thaipat2.net XSS vulnerability

Vulnerable URL: http://thaipat2.net/thiweb/FIUW/FIENTPOL002-1.ASP?row=1"...

vasectomymedical.com XSS vulnerability

Vulnerable URL: http://www.vasectomymedical.com/vasectomy-doctors/finddoctor3.asp?operationtype=1=1011101001=1"...

planecheck.com XSS vulnerability

Vulnerable URL: http://www.planecheck.com/aspsel2.asp?man==C130=Lockheed%20C-130%20Hercules=1"...

ljwvbly.ahsfhs.org XSS vulnerability

Vulnerable URL: http://ljwvbly.ahsfhs.org/Teams2/opponentseach2015.asp?Opponent1=West%20Birmingham%20Christian=1"...

mcmillencomm.com XSS vulnerability

Vulnerable URL: https://www.mcmillencomm.com/asp/guest1.asp?pubnumber=1"...

popularmotor.com XSS vulnerability

Open Bug Bounty ID: OBB-257560 Description| Value ---|--- Affected Website:| popularmotor.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

recruit.innolux.com XSS vulnerability

Vulnerable URL: http://recruit.innolux.com/hr/sys/add1.asp?indirect=1"...

amitause.com XSS vulnerability

Vulnerable URL: http://amitause.com/wstapmyo/wst.doryang02.asp?LocateID=1"...

angrin.tlri.gov.tw XSS vulnerability

Vulnerable URL: http://www.angrin.tlri.gov.tw/asp/COWUIDbirth0.asp?Brname=1"...

sweets-jar.com XSS vulnerability

Vulnerable URL: http://www.sweets-jar.com/mishelach/step1.asp?lead=1"...

asp.northshoresystems.com XSS vulnerability

Vulnerable URL: https://asp.northshoresystems.com/NorthshoreWebLIMA/NS/SessionCheck/Script2.aspx?Reason=1/-///'/"//--...

bontool.com XSS vulnerability

Vulnerable URL: http://www.bontool.com/category1.asp?D=conc=conforms==1/-///'/"//--...

Authentication Bypass Vulnerability in the Background of FLASH Website Management System of Unicom

CFCMS is a self-service website building platform with full Flash as its core. Authentication bypass vulnerability exists in the background of CFCMS. The vulnerability exists in /xmlEditor/chkuser.asp, which can be exploited by attackers to bypass the background login authentication and launch...

sheldrickwildlifetrust.org XSS vulnerability

Vulnerable URL: https://www.sheldrickwildlifetrust.org/asp/communityprogramsgalleryzoom.asp?Name=62320109659-pic1.jpg=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS...

CVE-2017-5965

The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\ in its pathname, visiting sitecore/shell/applications/install/dialogs/Upload%20Package/UploadPackage2.aspx to upload...