CVE-2008-6891

Multiple cross-site scripting XSS vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the 1 forumid parameter to a newmessage.asp and b messages.asp, and the 2 query string to default.asp...

AW BannerAd - Authentication Bypass

AW BannerAd - Authentication Bypass AW-BannerAd Login ByPass By JxE-13 Ro0T-MaFia Sistema : AW-BannerAd,Asp Scripts Archivo : adv/admin/index.asp User&Pass:' or 'x'='x :' or 'x'='x milw0rm.com 2009-08-03...

Snitz Forums 2000 Detection

Snitz Forums 2000, a free discussion forum application written in ASP, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid40469; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Smart ASP Survey SQL Injection

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

CVE-2009-2606

ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb...

CVE-2009-2606

ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb...

CVE-2009-2606

The CVE-2009-2606 entry concerns ASP Football Pool 2.3 where sensitive data is stored under the web root with insufficient access control, enabling remote retrieval of the NFL.mdb database file via a direct request. The core issue is improper access control on the web root, leading to exposure of...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

FTBBS ASP 7.0 upload vulnerability-vulnerability warning-the black bar safety net

% userid=getcookie"clubuserid" ............ if Application"FTBBSMB"7,0="M" then inFolder=yeardate&monthdate else inFolder=yeardate&monthdate&daydate end if call makefolderinFolder,fso myFolder = inFolder&"/"&userid call makefoldermyFolder,fso ................... formPath=inFolder&"/"&userid...

There is no Wscript. shell component to provide the right what do we do?- Vulnerability warning-the black bar safety net

Source: love toxic There may be a lot of people, seeing close up the wscript. shell,you feel no mention of the right to hope. It will give up. Generally when the closed surface components, you upload the cmd. exe to above to is running no command. The runtime will tell the fault. If you want to r...

Sql injection

SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-5220...

CVE-2008-6875

SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-5220...

CVE-2008-6874

Multiple SQL injection vulnerabilities in ASP SiteWare autoDealer 1 and 2 allow remote attackers to execute arbitrary SQL commands via the iType parameter in 1 Auto1/type.asp or 2 auto2/type.asp...

Sql injection

Multiple SQL injection vulnerabilities in ASP SiteWare autoDealer 1 and 2 allow remote attackers to execute arbitrary SQL commands via the iType parameter in 1 Auto1/type.asp or 2 auto2/type.asp...

CVE-2008-6875

The CVE-2008-6875 entry describes a SQL injection vulnerability in the ASP Product Catalog’s default.asp, exploitable via the cid parameter to allow remote execution of arbitrary SQL commands. The vulnerability is anchored to the catalog component (catalog.asp/default.asp) and is noted as a diffe...

CVE-2008-6874

CVE-2008-6874 describes multiple SQL injection vulnerabilities in the ASP SiteWare autoDealer products (AutoDealer 1 and 2). The vulnerability is exploitable via the iType parameter in the scripts Auto1/type.asp and auto2/type.asp, allowing remote attackers to craft SQL payloads that may be execu...

CVE-2008-6874

Multiple SQL injection vulnerabilities in ASP SiteWare autoDealer 1 and 2 allow remote attackers to execute arbitrary SQL commands via the iType parameter in 1 Auto1/type.asp or 2 auto2/type.asp...

CVE-2008-6875

SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-5220...