Lastguru ASP GuestBook 'View.asp' - SQL Injection Vulnerability

Title: Lastguru ASP GuestBook 'View.asp' - SQL Injection Vulnerability Product : Lastguru ASP GuestBook Version : Free Version Vendor: http://www.LastGuru.com Class: Input Validation Error CVE: Remote: Yes Local: No Published: 2012-03-04 Updated: Impact : Medium CVSSv2 Base : 7.5,...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

ASP Classifieds SQL Injection

Exploit Title: ASP Classifieds Sql Injection Date: 17/03/2012 Author: r45c4l Email: [email protected] Script url: http://preproject.com/pclasp/home/default.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

ASP Classifieds - SQL Injection

Exploit Title: ASP Classifieds Sql Injection Date: 17/03/2012 Author: r45c4l Email: [email protected] Script url: http://preproject.com/pclasp/home/default.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

ASP Classifieds - SQL Injection

ASP Classifieds - SQL Injection Exploit Title: ASP Classifieds Sql Injection Date: 17/03/2012 Author: r45c4l Email: [email protected] Script url: http://preproject.com/pclasp/home/default.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

KingCMS ASP 5.0/5.1 vulnerability-vulnerability warning-the black bar safety net

KingCMS ASP is based on ASP+ACCESS framework of a very good CMS system, the reception is all static processing, the new generation of KingCMS provides a better interface, more development leeway, more powerful expansion capability, and now also by many webmasters welcome. But in the absence of th...

An enterprise system is the presence of injection and solution-vulnerability warning-the black bar safety net

Brief description: An enterprise system infocont. asp file exists injectionvulnerabilities, the total Station does not filter special characters! Pro! Detailed description: A business website system infocont. aspfile exists injection. See the following code %@LANGUAGE="VBSCRIPT" CODEPAGE="9 3 6"%...

Lastguru ASP Guestbook SQL Injection

Title: Lastguru ASP GuestBook 'View.asp' - SQL Injection Vulnerability Product : Lastguru ASP GuestBook Version : Free Version Vendor: http://www.LastGuru.com Class: Input Validation Error CVE: Remote: Yes Local: No Published: 2012-03-04 Updated: Impact : Medium CVSSv2 Base : 7.5,...

LastGuru ASP Guestbook - 'View.asp' SQL Injection

source: https://www.securityfocus.com/bid/52293/info LastGuru ASP GuestBook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access ...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CDPI Software SQL Injection Vulnerability

Exploit for asp platform in category web applications CDPI Software SQL Injection Vulnerability Software : CDPIsite Date : 2/18/2012 Vendor : http://www.cdpisite.com.br Language : ASP Dork : "Powered by CDPIsite" Author : ITTIHACK Home : http://ittihack.com Vulnerable File: home.asp Exploit:...

Telerom CMS SQLi Vulnerability

Exploit for asp platform in category web applications Telerom CMS SQLi Vulnerability Software : Telerom Date : 2/17/2012 Vendor : http://www.telerom.co.il Language : ASP Dork : "Powered By Telerom" Author : ITTIHACK Home : http://ittihack.com Vulnerable File: index.asp Exploit:...

LANDesk Lenovo ThinkManagement Console Remote Command Execution

This module can be used to execute a payload on LANDesk Lenovo ThinkManagement Suite 9.0.2 and 9.0.3. The payload is uploaded as an ASP script by sending a specially crafted SOAP request to "/landesk/managementsuite/core/core.anonymous/ServerSetup.asmx" , via a "RunAMTCommand" operation with the...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

KedaiScript Shell Upload

Exploit Title: KedaiScript Remote Upload Shell Vulnerability DDate: 10-02-2012 Author: Netrondoank Software Link: www.kedaiscript.com Version: mlm10v21,mmgbinary,portal Tested on: windows 7 Contact: [email protected] E X P L O I T 1. Login As Demo...

Acidcat ASP CMS 3.5.2 Cross Site Scripting

Exploit Title: Acidcat ASP CMS v 3.5.1 - 3.5.2 Admin Panel - Reflected Cros Site-Scripting XSS Script Page : http://www.acidcat.com Date: 20-01-2012 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE9 Cross-Site Scripting XSS POC:...

SOOP Portal Raven 1.0 Shell Upload

In The Name Of GOD ============================================================================== SOOP Portal Raven 1.0 fckeditor Arbitrary File Upload Vulnerability ============================================================================== » Title : SOOP Portal Raven 1.0 fckeditor Arbitrary...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...