15 matches found
EUVD-2008-5900
Malware in sbrugna...
the net guys aspired2blog (sql/dd) Multiple Vulnerabilities
No description provided by source. --------------------------------------------------------- Portal Name: ASPIred2Blog Vendor : http://thenetguys.us/Home/Blog.asp Author : PouyaServer , [email protected] Vulnerability : SQL,DD --------------------------------------------------------- DD:...
Sql injection
SQL injection vulnerability in admin/blogcomments.asp in The Net Guys ASPired2Blog allows remote attackers to execute arbitrary SQL commands via the BlogID parameter...
CVE-2008-5930
SQL injection vulnerability in admin/blogcomments.asp in The Net Guys ASPired2Blog allows remote attackers to execute arbitrary SQL commands via the BlogID parameter...
CVE-2008-5931
The Net Guys ASPired2Blog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for admin/blog.mdb. NOTE: some of these details are obtained from third...
Improper access control
The Net Guys ASPired2Blog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for admin/blog.mdb. NOTE: some of these details are obtained from third...
CVE-2008-5930
SQL injection vulnerability in admin/blogcomments.asp in The Net Guys ASPired2Blog allows remote attackers to execute arbitrary SQL commands via the BlogID parameter...
CVE-2008-5930
The CVE-2008-5930 entry concerns a SQL injection vulnerability in The Net Guys ASPired2Blog, specifically in admin/blog_comments.asp via the BlogID parameter. The underlying flaw enables remote attackers to manipulate the database and execute arbitrary SQL commands. The available documents do not...
CVE-2008-5931
The CVE-2008-5931 entry refers to the Net Guys ASPired2Blog, where sensitive data is stored under the web root with insufficient access control. The vulnerability allows remote attackers to download the database file admin/blog.mdb, potentially exposing usernames and passwords. This root‑level ex...
CVE-2008-5931
The Net Guys ASPired2Blog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for admin/blog.mdb. NOTE: some of these details are obtained from third...
The Net Guys ASPired2Blog (SQL/DD) Multiple Remote Vulnerabilities
No description provided by source. --------------------------------------------------------- Portal Name: ASPIred2Blog Vendor : http://thenetguys.us/Home/Blog.asp Author : PouyaServer , [email protected] Vulnerability : SQL,DD --------------------------------------------------------- DD:...
the net guys aspired2blog - SQL Injection / File Disclosure
--------------------------------------------------------- Portal Name: ASPIred2Blog Vendor : http://thenetguys.us/Home/Blog.asp Author : PouyaServer , [email protected] Vulnerability : SQL,DD --------------------------------------------------------- DD: http://site.com/Path/admin/blog.mdb SQ...
The Net Guys ASPired2Blog (SQL/DD) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== The Net Guys ASPired2Blog SQL/DD Multiple Remote Vulnerabilities ==================================================================...
ASPired2Blog SQL Injection / Database Disclosure
--------------------------------------------------------- Portal Name: ASPIred2Blog Vendor : http://thenetguys.us/Home/Blog.asp Author : PouyaServer , [email protected] Vulnerability : SQL,DD --------------------------------------------------------- DD: http://site.com/Path/admin/blog.mdb SQ...
the net guys aspired2blog - SQL Injection File Disclosure
the net guys aspired2blog - SQL Injection File Disclosure --------------------------------------------------------- Portal Name: ASPIred2Blog Vendor : http://thenetguys.us/Home/Blog.asp Author : PouyaServer , [email protected] Vulnerability : SQL,DD...