4712 matches found
webessence 1.0.2 - Multiple Vulnerabilities
WebEssence 1.0.2 Multiple Vulnerabilities Bugs found by whitesheep, r00t and epicfail for Debug|Track session @ Backtrack|italia community conference www.backtrack.it XSS PoC: http://localhost/webessence/webessence/oembed.php?url=http://google.com&id=alert'Backtrack|it'; In "url" variable is...
WebEssence 1.0.2 Multiple Vulnerabilities
Exploit for php platform in category web applications ========================================= WebEssence 1.0.2 Multiple Vulnerabilities ========================================= WebEssence 1.0.2 Multiple Vulnerabilities XSS PoC:...
webessence 1.0.2 - Multiple Vulnerabilities
webessence 1.0.2 - Multiple Vulnerabilities WebEssence 1.0.2 Multiple Vulnerabilities Bugs found by whitesheep, r00t and epicfail for Debug|Track session @ Backtrack|italia community conference www.backtrack.it XSS PoC:...
Mihao8 CMS Cross Site Scripting
Title:Mihao8 CMS Multiple XSS Vulnerabilities Author£ºriuskskȪ¸ç Blog£ºhttp://riusksk.blogbus.com Data£º2010-4-23 =====================================================0x1======================================================================...
IIS can be PUT, but can not MOVE of reason-vulnerability warning-the black bar safety net
Today in the test IIS put vulnerability, found can put all IIS can't parse the file, the move is also normal, but it can not move as asp, asa and other IIS can parse the file, search the Internet for some articles, found is because the IIS configuration is not selected on the“script resource...
The modified mdb to asp the consequences-vulnerability warning-the black bar safety net
by:SuperHei·Lilo May be with the network security technology development., the administrator of the qualities are on the increase, when using access+asp system, not the database being downloaded to the mdb to asp or asa. The first does not say directly change the suffix, you can directly use the...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Core Security Technologies Advisory 2010.0406
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory Information Title: User Invoices Persistent XSS Vulnerability in CactuShop Advisory Id: CORE-2010-0406...
CORE-2010-0406 - User Invoices Persistent XSS Vulnerability in CactuShop
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory Information Title: User Invoices Persistent XSS Vulnerability in CactuShop Advisory Id: CORE-2010-0406...
CactuShop - User Invoices Persistent Cross-Site Scripting
User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory Information Title: User Invoices Persistent XSS Vulnerability in CactuShop Advisory Id: CORE-2010-0406 Advisory URL: http://www.coresecurity.com/content/cactushop-xss-persistent-vulnerability Date published: 2010-04-20 Date of la...
User Invoices Persistent XSS Vulnerability in CactuShop
Exploit for asp platform in category web applications ======================================================= User Invoices Persistent XSS Vulnerability in CactuShop ======================================================= User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory...
CactuShop - User Invoices Persistent Cross-Site Scripting
CactuShop - User Invoices Persistent Cross-Site Scripting User Invoices Persistent XSS Vulnerability in CactuShop 1. Advisory Information Title: User Invoices Persistent XSS Vulnerability in CactuShop Advisory Id: CORE-2010-0406 Advisory URL:...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Ding Feng enterprises smart built Station system injection search injection vulnerability analysis and exploit-vulnerability warning-the black bar safety net
Author: Mo if you are asked Version: Ding Feng enterprises smart built Station system ASP version V0. 3. 6 Yesterday the use of this system to get a webshell, but is the use of download the default database, the latter the discoverer of the system interface's also good, by the look of IT security...
Wind crossing technology ASP online shopping system 0 9 0 5-1 injection vulnerability-vulnerability warning-the black bar safety net
Wind crossing technology ASP online shopping system 0 9 0 5-1 Multi-file exists injection vulnerability Relates to document: proshow. asp, new. asp and the like. ! Size: 132.91 K Size: 5 0 0 x 3 9 1 Browse: 0 times Click to open a new window to browse the full map! Size: 88.01 K Size: 5 0 0 x 3 9...
Worry-free shopping system oday released-vulnerability warning-the black bar safety net
Actually code appear in a number of SQLintection, but in the Conn. asp: Set Conn = Nothing Response. Write "database connection error" Response. End End If %!-- include file="sqlcheck. asp" - Opened sqlcheck. the asp,part of the code is as follows: For Fyx=0 to uboundFyCs If FyCsFyx"" Then If...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
CVE-2010-1369
SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the email parameter...
