CVE-2008-5925

ASP-Dev XM Events Diary has a partial-access control weakness that exposes the diary.mdb database under the web root, allowing remote retrieval via a direct request. Affected component is the diary database/file handling within the web app; underlying issue is insufficient access control leading ...

CVE-2008-5924

SQL injection vulnerability in diaryviewC.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger: SQL injection, DoS...

DS-IPN Paypal Shop Database Disclosure

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

DS-IPN.NET Digital Sales IPN Database Disclosure Vulnerability

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

DS-IPN.NET Digital Sales IPN - Database Disclosure

DS-IPN.NET Digital Sales IPN - Database Disclosure -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || ||...

ASP ActionCalendar v.1.3 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== ASP ActionCalendar v.1.3 Auth Bypass SQL Injection Vulnerability ================================================================== Founded By : SuB-ZeRo WaLiD...

ASP ActionCalendar v.1.3 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : D-unit & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : www.warrenstudios.com...

ASP ActionCalendar 1.3 - Authentication Bypass

ASP ActionCalendar 1.3 - Authentication Bypass Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : D-unit & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : www.warrenstudios.com...

blogit! - SQL Injection File Disclosure Cross-Site Scripting

blogit! - SQL Injection File Disclosure Cross-Site Scripting --------------------------------------------------------- Portal Name: BlogIt! Download : http://www.katywhitton.com/downloads/BlogIt!/BlogItDL.zip Author : PouyaServer , [email protected] Vulnerability : SQL/DD/XSS...

The Walking Club (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== The Walking Club Auth Bypass SQL Injection Vulnerability ========================================================== Author : ByALBAYX The Walking Club Auth Bypass Script : The...

ASP Action Calendar 1.3 SQL Injection

Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : D-unit & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : www.warrenstudios.com --------------------------------------------------------- Exploit Auth...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. e-Vision CMS: crossite scripting...

ASP ActionCalendar 1.3 - Authentication Bypass

Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : D-unit & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : www.warrenstudios.com --------------------------------------------------------- Exploit Auth...

Virtual GuestBook 2.1 Remote Database Disclosure Vulnerability

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Virtual GuestBook 2.1 Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== Virtual GuestBook 2.1 Remote Database Disclosure Vulnerability ============================================================== -----------------------------I AM MUSLIM...

Virtual Guestbook 2.1 - Remote Database Disclosure

Virtual Guestbook 2.1 - Remote Database Disclosure -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || ||...

Virtual GuestBook 2.1 Database Disclosure

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. FCKeditor: crossite scripting, information leak. WOSendNews: crossite scripting, information leak...