PT-2021-9026

Name of the Vulnerable Software and Affected Versions ASUS RT-N53 version 3.0.0.4.376.3754 Description The issue is a buffer overflow that can be triggered by a long lan dns1 x or lan dns2 x parameter to the "Advanced LAN Content.asp" endpoint. Recommendations For ASUS RT-N53 version...

PT-2021-11733

Name of the Vulnerable Software and Affected Versions: ASUS DSL-N17U modem version 1.1.0.2 Description: The issue allows attackers to access the admin interface without authentication by changing the admin password. This is achieved through a POST request to "Advanced System Content.asp" with...

PT-2018-14395

Name of the Vulnerable Software and Affected Versions ASUS RT-AC58U version 3.0.0.4.380 6516 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via various pages, including Advanced ASUSDDNS Content.asp, Advanced WSecurity Content.asp,...

PT-2018-13271

Name of the Vulnerable Software and Affected Versions ASUS DSL-N12E C1 version 1.1.2.3 345 Description The issue allows a remote attacker to execute arbitrary OS commands via service parameters. This can be achieved by using shell metacharacters in the destIP parameter of a cmdMethod=ping request...

new-star.com.my XSS vulnerability

Open Bug Bounty ID: OBB-461872 Description| Value ---|--- Affected Website:| new-star.com.my Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

hdjtech.com XSS vulnerability

Vulnerable URL: http://hdjtech.com/sense/content.asp?sensenum=18==1"...

PT-2014-4884

Name of the Vulnerable Software and Affected Versions ASUS RT series routers versions prior to 3.0.0.4.374.5517 Description The issue allows remote authenticated users to obtain the administrator user name and password by reading the source code of the Advanced System Content.asp page when an...

StartSite.ir Cross-site Scripting Vulnerability

------------In The Name Of God------------ StartSite.ir Cross-site Scripting Vulnerability AUTHOR: md.r00t Mail: [email protected] Website: www.r00t.gigfa.com Forum: http://ajaxtm.com/forum Google D0rk: "Powered by StartSite.ir" xss EXPLOIT: scriptalert/0//script script...

StartSite.ir Cross Site Scripting

------------In The Name Of God------------ StartSite.ir Cross-site Scripting Vulnerability AUTHOR: md.r00t Mail: [email protected] Website: www.r00t.gigfa.com Forum: http://ajaxtm.com/forum Google D0rk: "Powered by StartSite.ir" xss EXPLOIT: alert/0/ VULN IN HERE...

CVE-2008-4612

Cross-site scripting XSS vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to 1 forums.asp and 2 content.asp...

CVE-2008-4612

Cross-site scripting XSS vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to 1 forums.asp and 2 content.asp...

CVE-2008-4614

PortalApp 4.0 does not require authentication for 1 forums.asp and 2 content.asp, which allows remote attackers to create and delete forums, topics, and replies...

CVE-2008-4612

PortalApp 4.0 is affected by an XSS flaw triggered through the keywords parameter in content.asp (and also in forums.asp). The root cause is an input sanitization error that allows remote attackers to inject arbitrary HTML/JS into a victim’s browser. This is evidenced by multiple sources (HTBridg...

CVE-2008-4612: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to 1 forums.asp and 2 content.asp...

CVE-2008-4614: Improper Authentication

PortalApp 4.0 does not require authentication for 1 forums.asp and 2 content.asp, which allows remote attackers to create and delete forums, topics, and replies...

forumsasp-sql.txt

this exploit have 500.000 site admin forums.asp hack content.asp?contenttype SQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 2 : allinurl: "content.asp?contenttype" EXPLOIT 1:...

Unfixed XSS vulnerability at mjconnect.net

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting mjconnect.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is currently...

Unfixed XSS vulnerability at www.anavatanbornova.org

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.anavatanbornova.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is...

Unfixed XSS vulnerability at www.lyra12.com

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.lyra12.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is currently...

Unfixed XSS vulnerability at www.kiinko.fi

Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting www.kiinko.fi, which at the time of submission ranked 6833324 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is currentl...