45 matches found
EUVD-2005-2069
Malware in sbrugna...
aspnuke.it Open Redirect vulnerability
Open Bug Bounty ID: OBB-429704 Description| Value ---|--- Affected Website:| aspnuke.it Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...
ASPNuke <= 0.80 (comment_post.asp) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w SQL Injection Exploit for ASPNuke = 0.80 This exploit retrieve the username of the administrator of the board and his password crypted in SHA256 Related advisory: http://www.securityfocus.com/archive/1/403479/30/0/threaded Discovered and Coded ...
ASPNuke 0.80 Comments.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13315/info ASPNuke is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resu...
ASPNuke 0.80 Detail.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13317/info ASPNuke is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resu...
ASP Nuke - SQL Injection Vulnerability
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub11-asp-nuke-sql-injection-vulnerability/ ''' Abysssec Inc Public Advisory Title : ASP Nuke Sql Injection...
ASPNuke 0.80 Select.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13320/info ASPNuke is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
ASPNuke 0.80 forgot_password.asp email Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14062/info ASPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...
ASPNuke 0.80 Profile.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13319/info ASPNuke is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470...
ASP Nuke SQL Injection Vulnerability
Exploit for asp platform in category web applications ==================================== ASP Nuke SQL Injection Vulnerability ==================================== Title : ASP Nuke Sql Injection Vulnerability Affected Version : AspNuke 0.80 Discovery : www.abysssec.com Vendor :...
ASP Nuke - SQL Injection
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub11-asp-nuke-sql-injection-vulnerability/ ''' Abysssec Inc Public Advisory Title : ASP Nuke Sql Injection Vulnerability Affected Version :...
ASPNukelanguage_select.aspHTTP响应拆分漏洞 Exploit
No description provided by source. http://www.example.com/module/support/language/languageselect.asp?action=go&LangCode=trivero%0d%0aSet-Cookie%3Asome%3Dvalue 以下是HTTP首部示例： 请求： POST /module/support/language/languageselect.asp?action=go&LangCode=trivero%0d%0 aSet-Cookie%3Asome%3Dvalue HTTP/1.0...
ASPNukecomment_post.asp远程SQL注入漏洞 Exploit
No description provided by source. !/usr/bin/perl -w SQL Injection Exploit for ASPNuke = 0.80 This exploit show the username of the administrator of the board and his password crypted in SHA256 Related advisory: http://www.securityfocus.com/archive/1/403479/30/0/threaded Discovered and Coded by...
ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470...
ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ASP Nuke...
ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability ================================================================= Title : ASPNuke = 0.80 register.asp Remote S...
ASPNuke 0.80 - register.asp SQL Injection
ASPNuke 0.80 - register.asp SQL Injection Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470...
ASP-Nuke <= 0.80 language_select.aspHTTP响应拆分漏洞
BUGTRAQ: 14063 ASPNuke中存在HTTP响应拆分漏洞，成功利用这个漏洞的攻击者可以影响或误导保存、缓存或解释Web内容的方式。 起因是没有正确的过滤用户输入。请看/module/support/language/languageselect.asp第31行代码： ... If steForm action = go Then make sure the required fields are present If TrimsteForm LangCode = Then sErrorMsg = steGetText Please select a language fro...
ASPNukeSQL080.txt
!/usr/bin/perl -w SQL Injection Exploit for ASPNuke = 0.80 This exploit retrieve the username of the administrator of the board and his password crypted in SHA256 Related advisory: http://www.securityfocus.com/archive/1/403479/30/0/threaded Discovered and Coded by Alberto Trivero use LWP::Simple;...