ASPNuke 0.80 Language_Select.ASP HTTP Response Splitting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14063/info ASPNuke is prone to an HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to...

ASPSiteware ASP Gallery 1.0 - SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: ASPSiteware Gallery SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Demo Link:http://www.aspsiteware.com/Gallery/ Version:1.0 Price:50$ Contact: [email protected] Website:...

CactuShop 6.0 - Database Disclosure Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== Note : Forever...

TalentSoft Web+ Client/Monitor/server 4.6 Source Code Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1722/info Talentsoft Web+ is a web application server that can be integrated with various web technologies. Web+ can be used to display the source code of WML files residing on an NTFS parition by appending certain data t...

Spaw Editor 1.0 & 2.0 - Remote File Upload

No description provided by source. Tilte: Spaw Editor v1.0 & 2.0 Remote File Upload . Date....................: 20-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: Spaw Editor v1 & v2 Impact..................: Remote Site Software .............

Microsoft IIS 6.0 ASP Stack Overflow (Stack Exhaustion) Denial of Service (MS10-065)

... Microsoft Internet Information Services是由微软公司提供的基于运行Microsoft Windows的互联网基本服务。 ... Microsoft Internet Information Services IIS 5.1, 6.0, 7.0和7.5版本中的ASP实施中存在栈消耗漏洞。远程攻击者可以借助对IIS所承载网站的ASP页面发送特制URI请求导致拒绝服务守护进程中断。该漏洞与asp.dll有关，又名"IIS重复参数请求拒绝服务漏洞"。 IIS 6.0 ASP DoS PoC usage: perl IISdos.pl use...

Microsoft IIS 4.0/5.0 Device File Local DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2973/info Microsoft IIS is prone to denial of service attacks by local users. This issue is exploitable if the local attacker can create an .asp file which makes calls to various devices names. The local attacker must of...

CodeToad ASP Shopping Cart Script Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/32568/info CodeToad ASP Shopping Cart Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...

ASP ListPics 5.0 Listpics.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21279/info ASP ListPics is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

MidiCart PHP,ASP Shell Upload Vulnerability

No description provided by source. Exploit Title: MidiCart PHP,ASP Shell Upload Vulnerability Date: 17.05.2010 Author: DigitALL Software Link: http://download.cnet.com/MidiCart-PHP-Shopping-Cart/3000-26494-10064577.html Version: All Version Tested on: DigitALL Xp Version x1 Code : dork :...

ASP Forum Script messages.asp message_id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/32571/info ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Shopxp 7.4 TEXTBOX2.ASP SQL注入漏洞

No description provided by source...

强智教务系统延时注入一枚

简要描述： 好多sa啊 详细说明： 看了一下乌云好像没人提交这个页面的注入，我就来提交一下吧详细如下 1、建站程序类型：ASP+MsSql 2、漏洞类型：SQL注入 3、缺陷文件：/Loginxsmm.asp 4、注入参数：XH 5.涉及版本：未知，求厂商明细 7、危害程度：高危 8、涉及厂商：湖南强智科技发展有限责任公司 9、厂商网站：http://www.qzdatasoft.com/ 10、安装量：非常大，案例页面：http://www.qzdatasoft.com/cgal.html 11、是否拥有源代码分析：暂无...

逐浪cms两处文件上传漏洞（有服务器环境限制）

简要描述： 也是要结合iis6的解析漏洞，不知道这两处跟之前提交的会不会重复 详细说明： 由于官网不是iis6的环境 我本地进行测试 第一处 http://127.0.0.1/Plugins/ckfinder/ckfinder.html 在左边文件夹Files下新建字幕了1.asp 然后点击1.asp目录然后上传图片木马3.gif 然后右键查看文件 就可以看到文件地址了 文件地址 http://127.0.0.1/UploadFiles/files/1.asp/3.GIF 第二处 http://127.0.0.1/plugins/imageupload.aspx protected vo...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

ASP-Nuke 'gotourl.asp'开放重定向漏洞

Bugtraq ID:66523 ASP-Nuke是一款基于WEB的系统架构程序，运行在多种Unix和Linux系统下，也可运行于Windows平台下。 ASP-Nuke允许攻击者构建恶意URI，诱使用户解析，可重定向用户通信，进行网络钓鱼等攻击。 0 ASP-Nuke 2.0.7 目前没有详细解决方案： http://www.asp-nuke.com/ http://host/gotoURL.asp?url=Open Redirectionid=43569...

Web message boards of the Big Three dangerous vulnerability-a vulnerability warning-the black bar safety net

Message boards as a web page with the viewer interactive media and popular,in a variety of large and small site almost always has its shadow,so the message Board is now the site of a key protagonist,so its safe not not seriously considered,now listed in the guestbook when making the three big...