CVE-2008-6382

ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb...

CVE-2008-6382

CVE-2008-6382 affects ASP Portal 3.2.5, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to directly request ASPPortal.mdb and download the database file. The fixed details (affected versions, root cause, exploitation, and remediatio...

CVE-2008-6382

ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb...

Sql injection

SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter...

CVE-2008-6353

SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter...

CVE-2008-6353

SQL injection vulnerability in index.asp in ASP-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cha parameter...

CVE-2008-6353

CVE-2008-6353 describes an SQL injection vulnerability in ASP-CMS 1.0, specifically in index.asp, exploitable via the cha parameter. The underlying issue is untrusted input used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. The NVD data assigns a high impact (base s...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Cetera CMS: crossite scripting...

Access2asp imageLibrary Arbitrary ASP Shell Upload Vulnerability

Exploit for unknown platform in category web applications ================================================================ Access2asp imageLibrary Arbitrary ASP Shell Upload Vulnerability ================================================================ + Title: imageLibrary dork...

Access2asp imageLibrary Shell Upload

|| || | || o,7 || . o7 || 4||| ow, : / / . upload shell Found by ::: mr.al7rbi Contact ::: n16 at live.com my Group ::: islam-defenders Team + Title: imageLibrary dork inurl:"defaultImage.asp" + EXPLOITS: http://www.site.com/imageLibrary//admin/images/defaultImage.asp exp:...

CVE-2008-6329

SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters, as reachable from Employee/emplogin.asp. NOTE: some of these details are obtained from third party information...

CVE-2008-6329

The CVE-2008-6329 entry concerns a SQL injection vulnerability in Pre ASP Job Board, reported in Employee/login.asp (and reachable from Employee/emp_login.asp). The vulnerability is triggered by the Username and Password parameters, allowing remote attackers to execute arbitrary SQL commands. The...

CVE-2008-6329

SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters, as reachable from Employee/emplogin.asp. NOTE: some of these details are obtained from third party information...

asp File Download vulnerability-vulnerability warning-the black bar safety net

1:boil the Outlook Const adTypeBinary = 1 FileName = Request. QueryString”FileName” if FileName = “” Then Response. Write “invalid file name!” Response. End End if FileExt = MidFileName, InStrRevFileName, “.” + 1 Select Case the UCaseFileExt Case “ASP”, “ASA”, “aspX”, “ASAX”, “MDB” Response. Writ...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

BannerManager 0.81 SQL Injection

SISTEMA DE BANNER: BannerManager v0.81 http://sourceforge.net/projects/bannermanager -------------------------------------- vulnerable: sql injection : Found by: rootzig -------------------------------------- Greetz: Eviwrite :P ------------------- -----------------------------------------...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Drupal: Crossite scripting. E107: crossite scripting...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Drupal: Crossite scripting...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Relay: HTTP response splitting, SQL injection, directory traversal...

Moving-2 0 0 6 a few small flaws-vulnerability warning-the black bar safety net

The author of the article: the falling leaves swirlingJJSEX Information source: http://hi.baidu.com/jluoye Now they move easy companies are taking action easy content management system open source, Hey However with the move-2 0 0 6 people is still a lot, my hand on the SWI 0day almost never used,...