22 matches found
EUVD-2005-0425
Malware in sbrugna...
EUVD-2002-1709
Malware in sbrugna...
EUVD-2005-0424
Malware in sbrugna...
EUVD-2002-1708
Malware in sbrugna...
ASPjar Guestbook SQLi Vulnerability
ASPJar SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.16389";...
aspjarSQL.txt
hello , my name is: arash setayeshi & my yahoo id is : arashpc0 I found a new vulnerability in aspjar guestbook that we can control website & go to admin control panel by sql injection. sql injection : in login pageguestbook/admin/login.asp , username should be blank & password is : ' or 'x'='x...
a new sql injection for aspjar guestbook
hello , my name is: arash setayeshi & my yahoo id is : arashpc0 I found a new vulnerability in aspjar guestbook that we can control website & go to admin control panel by sql injection. sql injection : in login pageguestbook/admin/login.asp , username should be blank & password is : ' or 'x'='x...
CVE-2002-1729
CVE-2002-1729 describes a cross-site scripting (XSS) vulnerability in ASPjar Guestbook 1.00. The flaw occurs in the guestbook message handling when the user-supplied parameter (the "web site" field) is not properly sanitized, allowing remote attackers to execute arbitrary script as other users. D...
CVE-2002-1730
CVE-2002-1730 affects ASPjar Guestbook 1.00, where remote attackers can delete arbitrary messages by accessing the delete.asp administrative script with certain cookie values set to "true". The vulnerability is documented in the CVE entry and is referenced by NVD entries and CVE lists. The core i...
CVE-2002-1730
ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative script with certain cookie values set to "true"...
CVE-2002-1729
Cross-site scripting vulnerability XSS in ASPjar Guestbook 1.00 allows remote attackers to execute arbitrary script as other users via the "web site" parameter in a guestbook message...
CVE-2005-0423
SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password field...
CVE-2005-0424
Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook allows remote attackers to delete messages. NOTE: there is insufficient information to know if this is the same issue as CVE-2002-1730...
aspjarXSS.txt
A XSS vulnerability exist in the ASPjar Tell-a-Friend. Code: "XSS!-- You can put the code in "Your Name Text". But this company is no longer exist and the software is no longer being updated...
ASPjar Tell-a-Friend
A XSS vulnerability exist in the ASPjar Tell-a-Friend. Code: "pbrpbrfont size=44XSS!-- You can put the code in "Your Name Text". But this company is no longer exist and the software is no longer being updated...
CVE-2005-0424
Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook allows remote attackers to delete messages. NOTE: there is insufficient information to know if this is the same issue as CVE-2002-1730...
CVE-2005-0423
SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password field...
CVE-2005-0424
Affected software: ASPjar Guestbook 1.00. The CVE-2005-0424 entry maps to CVE-2002-1730 and describes a vulnerability in delete.asp that enables remote attackers to delete arbitrary messages by crafting specific cookie values. Root cause: improper handling of the delete.asp administrative script ...
CVE-2005-0423
ASPjar Guestbook is affected by a SQL injection in login.asp that allows remote attackers to execute arbitrary SQL commands via the password field. The vulnerability is documented in multiple sources (e.g., NVD and OpenVAS entries) with the same basic vector (unvalidated input in login form). The...
ASPjar guestbook (Injection in login page)
Go to /admin/login.asp and type in password field: ' or ''=' Also in some version of ASPjar , Attackers can delete messages . Go to /admin/delete.asp...