4712 matches found
WS Interactive Automne 4.1 - adminupload-controler.php Arbitrary File Upload
WS Interactive Automne 4.1 - adminupload-controler.php Arbitrary File Upload source: https://www.securityfocus.com/bid/46774/info Automne is prone to an arbitrary-file-upload vulnerability. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in...
5UCMS <= v1. 2. 2 0 2 4 background not validation and SQL injection-vulnerability warning-the black bar safety net
Brief description: The background file does not do verification, it has been filtered does not strictly lead toSQL injection Detailed description: File location admin/ajax. asp 2 4 row Case "modeext" .. 2 6 row ecid=ReplaceRequest"cid","'","" 2 7 row cid=ReplaceRequest"id","'","" .. .. 3 1 The li...
ewebeditor 2.8 commercial version of the backend plug in a word and fix-vulnerability warning-the black bar safety net
Affected version:2.8 Business Edition Attack use:login background, click on Change Password---new password set to 1":eval request"a"’ Set after the success, the access to asp/config. asp file, the word Trojan is written to this file inside the In this paper, ewebeditor commercial version...
Djm Web Agency (page.asp) Sql Injection Vulnerability
Exploit for php platform in category web applications Djm Web Agency page.asp Sql Injection Vulnerability .:. Author : eXeSoul .:. Contact : email protected .:. Date : 04-03-2011 .:. category : Web Apps SQli .:. HomePage : www.indishell.in .:. Tested on : windows/linux .:. Vulnerability : ASP Sql...
DJM Web Agency SQL Injection
Djm Web Agency page.asp Sql Injection Vulnerability .:. Author : eXeSoul .:. Contact : [email protected] .:. Date : 04-03-2011 .:. category : Web Apps SQli .:. HomePage : www.indishell.in .:. Tested on : windows/linux .:. Vulnerability : ASP Sql Injection Vunerability .:. Vendor : www.djmweb.be ....
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
WSI CMS SQL Injection Vulnerability
Exploit for php platform in category web applications Web : http://www.wsicorporate.com/ Dork : intext:"Powered by WSI" filetype:asp SQL --- http://site.com/xxx.asp?PId=SQL http://site.com/xxx.asp?Id=SQL http://site.com/form.asp?formname=nameSQL POC --- http://site.com/xxx.asp?PId=1234 having 1=1...
ASP may appear in an included vulnerability(Server. execute)-vulnerability warning-the black bar safety net
author: bin % Server. executerequest“file” % With the include distinction, it can dynamically include files. Is included file inside the executable ASP code, in a foreign source in use. include.asp?file=./1.txt 1.txt %response. writenow%...
Symantec IM Manager 'eval()' Code Injection Vulnerability
This host is installed with Symantec IM Manager and is prone to code injection vulnerability. OpenVAS Vulnerability Test $Id: secpodsymantecimmanagercodeinjvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ Symantec IM Manager 'eval' Code Injection Vulnerability Authors: Sooraj KS Copyright: Copyrigh...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Site Designed by Hypersoft Solutions SQL Injection Vulnerability
Exploit for asp platform in category web applications Web : http://www.hypersoftsolutions.com/ Filetype : asp Dork : intext:"By: HypersoftSolutions.Com" : inurl :"cms.asp?LinkId=" SQL --- http://site.com/cms.asp?LinkId=SQL http://site.com/cms.asp?CatId=SQL POC --- http://site.com/cms.asp?LinkId=1...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Use the IIS semicolon parsing upload vulnerability analysis-vulnerability warning-the black bar safety net
First look at the following a very common file upload extension filter code: fileExt=lcaseofile. FileExt arrUpFileType=splitUpFileType,"|" for i=0 to uboundarrUpFileType if fileEXT=trimarrUpFileTypei then EnableUpload=true exit for end if next if fileEXT="asp" or fileEXT="asa" or fileEXT="aspx" o...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Multi Agent System city. asp SQL injection vulnerability and fix-vulnerability warning-the black bar safety net
Author: R4dc0re Information Description: a Multi-Agent System of the city. asp the reason there may be the use ofSQL injectionis due to this file and there is insufficient filtering of user requests query caused. The use of this vulnerability may allow an attacker to use to the server application...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...