CVE-2008-5608

CVE-2008-5608 affects ASP AutoDealer where sensitive data is stored under the web root and is not properly access-controlled. The underlying issue is direct access to the web-root file auto.mdb, enabling remote attackers to download the database file via a direct request. The available connected ...

CVE-2008-5608: Undefined Security Weakness

ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for auto.mdb...

CVE-2008-5595: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.asp in ASP AutoDealer allows remote attackers to execute arbitrary SQL commands via the ID parameter...

ASP AutoDealer Remote Database Disclosure Vulnerability

No description provided by source. ASPAutoDealer DD Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

ASP AutoDealer - Remote Database Disclosure

ASP AutoDealer - Remote Database Disclosure ASPAutoDealer DD Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

ASP AutoDealer - Remote Database Disclosure

ASPAutoDealer DD Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ----------------------------------------------------------- exp for demo: DD...

ASP AutoDealer (SQL/DD) Multiple Remote Vulnerabilities

No description provided by source. -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script ...

ASP AutoDealer (SQL/DD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= ASP AutoDealer SQL/DD Multiple Remote Vulnerabilities ======================================================= -----------------------------OffensiveTrack------------------------------...

aspautodealer-sqldisclose.txt

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : Merlix ASP AutoDealer download :...

ASP AutoDealer - SQL Injection / File Disclosure

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : Merlix ASP AutoDealer download :...

ASP AutoDealer - SQL Injection File Disclosure

ASP AutoDealer - SQL Injection File Disclosure -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact :...

Sql injection

SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the iPro parameter...

CVE-2007-0053

SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the iPro parameter...

CVE-2007-0053

SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the iPro parameter...

CVE-2007-0053

The CVE-2007-0053 issue affects the ASP SiteWare autoDealer 2.0 and earlier. The vulnerability is a SQL injection in detail.asp via the iPro parameter, enabling remote attackers to execute arbitrary SQL commands. This is documented with a base CVSSv2 score of 7.5 (HIGH) and indicates potential pa...

CVE-2007-0053: Undefined Security Weakness

SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the iPro parameter...

autoDealer <= 2.0 (iPro) Remote SQL Injection Vulnerability

Title : autoDealer = 2.0 iPro Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.aspsiteware.com $$ : $60.00 SQL--------------------------------------------------------- http://target/path//detail.asp?iPro=SQL Example:...

AutoDealer 2.0 - detail.asp?iPro SQL Injection

AutoDealer 2.0 - detail.asp?iPro SQL Injection Title : autoDealer = 2.0 iPro Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.aspsiteware.com $$ : $60.00 SQL--------------------------------------------------------- http://target/path//detail.asp?iPro=SQL Example:...

autoDealer <= 2.0 (detail.asp iPro) Remote SQL Injection Vulnerability

Exploit for asp platform in category web applications ====================================================================== autoDealer = 2.0 detail.asp iPro Remote SQL Injection Vulnerability ====================================================================== Title : autoDealer = 2.0 iPro...

AutoDealer 2.0 - 'detail.asp?iPro' SQL Injection

Title : autoDealer = 2.0 iPro Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.aspsiteware.com $$ : $60.00 SQL--------------------------------------------------------- http://target/path//detail.asp?iPro=SQL Example:...