EUVD-2006-6072

Malware in sbrugna...

EUVD-2006-6073

Malware in sbrugna...

EUVD-2006-6058

Malware in sbrugna...

BaalASP 2.0 Database Disclosure

======================================================================================== | Title : BaalASP 2.0 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iq-ty.com...

BaalASP 2.0 DB Download Vulnerability

No description provided by source. ======================================================================================== | Title : BaalASP 2.0 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

BaalASP 2.0 - Database Disclosure

======================================================================================== | Title : BaalASP 2.0 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iq-ty.com...

BaalASP 2.0 - Database Disclosure

BaalASP 2.0 - Database Disclosure ======================================================================================== | Title : BaalASP 2.0 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

BaalASP 2.0 DB Download Vulnerability

Exploit for asp platform in category web applications ===================================== BaalASP 2.0 DB Download Vulnerability ===================================== ======================================================================================== | Title : BaalASP 2.0 DB Download...

CVE-2006-6089

Multiple cross-site scripting XSS vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject arbitrary web script or HTML via the 1 title Subject, 2 groupname Group Name, or 3 detail Message field...

CVE-2006-6090

Multiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute arbitrary SQL commands via the 1 password parameter to a adminlogin.asp, the 2 name or 3 password parameter to b userlogin.asp, or the 3 search parameter to search.asp...

CVE-2006-6090

Multiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute arbitrary SQL commands via the 1 password parameter to a adminlogin.asp, the 2 name or 3 password parameter to b userlogin.asp, or the 3 search parameter to search.asp...

CVE-2006-6090

CVE-2006-6090 documents multiple SQL injection vulnerabilities in the BaalAsp forum that allow remote attackers to execute arbitrary SQL commands via (1) the password parameter to adminlogin.asp, (2) the name or password parameter to userlogin.asp, or (3) the search parameter to search.asp. The N...

CVE-2006-6089

Multiple cross-site scripting XSS vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject arbitrary web script or HTML via the 1 title Subject, 2 groupname Group Name, or 3 detail Message field...

CVE-2006-6089

CVE-2006-6089 corresponds to multiple cross-site scripting (XSS) vulnerabilities in BaalAsp forum’s addpost1.asp. The flaws allow remote attackers to inject arbitrary script or HTML via the title/Subject, groupname/Group Name, or detail/Message fields. The affected software is BaalAsp forum (addp...

CVE-2006-6075

Cross-site scripting XSS vulnerability in addpost1.asp in BaalAsp forum allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6075

The CVE-2006-6075 entry describes a cross-site scripting (XSS) vulnerability in BaalAsp forum, specifically in addpost1.asp via the name parameter. The underlying issue is insufficient input handling that allows remote attackers to inject arbitrary script/HTML. CVSS v2 base score is 6.8 (Medium) ...

PT-2006-6735 · Baal · Baalasp Forum

Name of the Vulnerable Software and Affected Versions: BaalAsp forum affected versions not specified Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The vulnerabilities can be exploited through...

PT-2006-6734 · Baalasp · Baalasp Forum

Name of the Vulnerable Software and Affected Versions: BaalAsp forum affected versions not specified Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the addpost1.asp file of the BaalAsp forum. These vulnerabilities allow remote attackers to inject arbitrary we...

baalasp.txt

vendor site:http://baalasp.com/ product:BaalAsp forum bug:login bypass, injection sql post, xss post risk:high authentification bypass : admin login bypass == /adminlogin.asp passwd: 'or''=' user login bypass == /userlogin.asp user: 'or''=' passwd: 'or''=' injection sql post == /search.asp...

baalASPSQL.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 002 ------------------------------------------------------ Date - 10/2005 BaalASP Free Bulletin Board Sql Injection Admin Login AFFECTED PRODUCTS ================= BaalASP Free Bulletin Board...