CVE-2009-2776

CVE-2009-2776 is a SQL injection vulnerability affecting Smart ASP Survey’s showresult.asp, exploitable via the catid parameter to execute arbitrary SQL commands remotely. Public records consistently describe the flaw as a SQL injection in showresult.asp, with no additional details on patched ver...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

VulnCheck KEV: CVE-2009-1536

ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service daemon outage via a series of crafted HTTP requests, aka...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Dumb math captcha: protection bypass backdoor...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

ewebeditor 5.2 column directory vulnerability-vulnerability warning-the black bar safety net

Author:st0p Due to the Do It Yourself station with the editor in front of their streamlined ewebeditor 5.2 the asp version,work tired,want to rest,you analyze A this editor,I did not expect,also really let I found a little vulnerability,although the effect is not,however, used to assist is still...

Online Work Order Suite ASP 3.10 XSS

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Online Work Order Suite ASP 3.10 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download :...

Shopmaker CMS 2.0 (bSQL/ LFI) Multiple Remote Vulnerabilities

No description provided by source. Shopmaker CMS bSQL/LFI Multiple Remote Vulnerabilities ============================================================================== Software : Shopmaker Asp version : version 2.0 Vendor : http://www.shopmaker.dk/ Author : Platen mail: platen.secureatgmail.com...

Shopmaker CMS 2.0 (bSQL/ LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Shopmaker CMS 2.0 bSQL/ LFI Multiple Remote Vulnerabilities ============================================================= Shopmaker CMS bSQL/LFI Multiple Remote Vulnerabilities...

A network of popular campus web CMS system vulnerabilities-vulnerability warning-the black bar safety net

Today inadvertently browsing to the home of a high school's website, casually turn to turn. The bottom of the page directly to have“admin”, and click directly into the Background address for http://www.xxxxx.net/xyadmin/login.asp Guess a bit of the database, found at: http://www. xxxxx...

ShopMaker CMS 2.0 - Blind SQL Injection Local File Inclusion

ShopMaker CMS 2.0 - Blind SQL Injection Local File Inclusion Shopmaker CMS bSQL/LFI Multiple Remote Vulnerabilities ============================================================================== Software : Shopmaker Asp version : version 2.0 Vendor : http://www.shopmaker.dk/ Author : Platen mail:...

AW BannerAd (Auth Bypass) SQL Injection Vulnerability

No description provided by source. AW-BannerAd Login ByPass By JxE-13 Ro0T-MaFia Sistema : AW-BannerAd,Asp Scripts Archivo : adv/admin/index.asp User&Pass:' or 'x'='x :' or 'x'='x...

Sql injection

SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL commands via the messageid parameter...

CVE-2008-6890

SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL commands via the messageid parameter...

CVE-2008-6891

Multiple cross-site scripting XSS vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the 1 forumid parameter to a newmessage.asp and b messages.asp, and the 2 query string to default.asp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the 1 forumid parameter to a newmessage.asp and b messages.asp, and the 2 query string to default.asp...

CVE-2008-6890

CVE-2008-6890 describes an SQL injection vulnerability in the ASP Forum Script’s messages.asp, exploitable via the message_id parameter. The affected component is the ASP Forum Script’s messaging functionality; the root cause is improper handling of user-supplied input in message_id, enabling an ...

CVE-2008-6891

CVE-2008-6891 concerns multiple XSS flaws in ASP Forum Script. The affected component is the ASP Forum Script web application, with the vulnerabilities exploitable via user-supplied input: (1) the forum_id parameter to new_message.asp and to messages.asp, and (2) the query string to default.asp. ...

CVE-2008-6890

SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL commands via the messageid parameter...