Efestech Video v5,0 (id) Remote Sql Injection

$Author : RMx $Mail : [email protected] $Homepage : Coderx.org $Script name :Efestech video v5.0 $Script download :http://www.aspindir.com/goster/4835 $Script Sales : Free $Thanks : Ex-47 , TRIP $Vulnerable file : Default.asp $Vulnerable code : id parameters cannot filter... $Exploit :...

(tip=sollinkicerik)SQL Injection Vulnerability

CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ tip=sollinkicerikSQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net WHEN YOU PUT THIS SQL CODE YOU can SEE ADMN NAME,ADMIN HASH DorK : ''tip=sollinkicerik'' EXPLOIT:...

CVE-2008-0771

Multiple SQL injection vulnerabilities in default.asp in Site2Nite allow remote attackers to execute arbitrary SQL commands via the 1 txtUserName and 2 txtPassword parameters. NOTE: some of these details are obtained from third party information...

CVE-2008-0771

CVE-2008-0771 involves multiple SQL injection vulnerabilities in Site2Nite’s default.asp. The vulnerable component is the web application’s default.asp, exploitable via the parameters txtUserName and txtPassword , enabling remote attackers to execute arbitrary SQL commands. The CVE’s NVD record a...

Cross site scripting

Cross-site scripting XSS vulnerability in Default.asp in RapidShare Database allows remote attackers to inject arbitrary web script or HTML via the Arayalim parameter...

CVE-2007-6674

Cross-site scripting XSS vulnerability in Default.asp in RapidShare Database allows remote attackers to inject arbitrary web script or HTML via the Arayalim parameter...

CVE-2007-6674

CVE-2007-6674 describes a Cross-site Scripting (XSS) vulnerability in Default.asp of the RapidShare Database, exploitable by supplying arbitrary web script/HTML via the Arayalim parameter. The NVD entry lists a Medium risk (CVSS v2 base score 4.3) with network attack vector, no confidentiality im...

CVE-2007-6556

Multiple SQL injection vulnerabilities in websihirbazi 5.1.1 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to default.asp in a news page action or 2 the pageid parameter to default.asp...

CVE-2007-6168

SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Sql injection

SQL injection vulnerability in default.asp aka the Login Page in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2007-6138

SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp aka the Login Page. NOTE: some of these details are obtained from third party information...

CVE-2007-6138

SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp aka the Login Page. NOTE: some of these details are obtained from third party information...

CVE-2007-6143

Vulnerability: CVE-2007-6143 affects VU Case Manager (default.asp login page). Cause: SQL injection via the password parameter, enabling remote attackers to execute arbitrary SQL commands. Impact: partial confidentiality, integrity, and availability concerns for the application, with network-leve...

VUNET Case Manager Default.ASP SQL注入漏洞

VUNET Case Manager是一款基于ASP的WEB应用程序。 VUNET Case Manager不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'default.asp'脚本对用户提交的密码参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或可能操作数据库。 VUNET Case Manager 3.4 目前没有解决方案提供： http://vunet.us/casemanager.asp Password: anything' OR 'x'='x...

VUNET Mass Mailer Default.ASP SQL注入漏洞

VUNET Mass Mailer是一款基于ASP的WEB应用程序。 VUNET Mass Mailer不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'default.asp'脚本对用户提交的密码参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或可能操作数据库。 VUNET Mass Mail 目前没有解决方案提供： http://www.vunet.us/home.asp Password: anything' OR 'x'='x...

VUNET Case Manager 3.4 - default.asp SQL Injection

VUNET Case Manager 3.4 - default.asp SQL Injection source: https://www.securityfocus.com/bid/26523/info VUNET Case Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

[Aria-Security.Net] VU Case Manager "Username/Password" SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://vunet.us Login Page Default.asp Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To Aria-Security.Net...

VUNET Mass Mailer - 'default.asp' SQL Injection

source: https://www.securityfocus.com/bid/26522/info Mass Mailer is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

CVE-2007-5698

CVE-2007-5698 concerns a Cross-site scripting (XSS) vulnerability in default.asp of CREApark GOLD KOY PORTALI. The issue enables remote attackers to inject arbitrary web script or HTML via the aranan parameter. The vulnerability is documented across multiple sources (NVD entry and related records...

Sql injection

SQL injection vulnerability in default.asp in Next Gen Portfolio Manager allows remote attackers to execute arbitrary SQL commands via the 1 UsersEmail or 2 UsersPassword parameter in an ExecuteTheLogin action...