213 matches found
purchasing.harleymarine.com XSS vulnerability
Vulnerable URL: https://purchasing.harleymarine.com/default.asp?Note=1/-///'/"//--...
cityofcolumbiana.com XSS vulnerability
Vulnerable URL: http://www.cityofcolumbiana.com/Default.asp?ID=317=City%20Calendar=display=1537=1%3C!%27/%22/%27/%22/--%3E%3C/Script%3E%3CImage%20Srcset=K%20/;%20Onerror=confirmOPENBUGBOUNTY%20//%3E=LIST=2017-4-14 Details: Description| Value ---|--- Patched:| No Latest check for patch:|...
militarynews.ru XSS vulnerability
Vulnerable URL: http://www.militarynews.ru/default.asp?SStr="...
extraprezenty.abc24.pl XSS vulnerability
Vulnerable URL: http://www.extraprezenty.abc24.pl/default.asp?kat=79348='"--!confirmOPENBUGBOUNTY...
s-info.nu XSS vulnerability
Vulnerable URL: http://www.s-info.nu/region/default.asp?id=142";...
stewart.k12.ga.us XSS vulnerability
Vulnerable URL: http://www.stewart.k12.ga.us/Default.asp?PN=AdvancedSearch=SearchNow Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...
echols.k12.ga.us XSS vulnerability
Vulnerable URL: http://www.echols.k12.ga.us/Default.asp?PN=AdvancedSearch=SearchNow=All Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
sylacauga.k12.al.us XSS vulnerability
Vulnerable URL: http://www.sylacauga.k12.al.us/Default.asp?PN=AdvancedSearch=SearchNow=All Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
某校园建站系统同一文件多处sql注入漏洞
简要描述: sql 详细说明: 使用量非常多 http://www.dlwsxx.com/ws2004/model/login1.asp http://www.fzjcxx.cn/ws2004/model/login1.asp http://www.nxyancgjzx.com/ws2004/model/login1.asp http://www.sgtjb.com/ws2004/model/login1.asp http://www.sdwhys.com/ws2004/model/login1.asp...
ClickBlog! 2.0 Default.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20033/info ClickBlog! is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
VUNET Case Manager 3.4 'default.asp' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26523/info VUNET Case Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
ASPIntranet 2.1 Default.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21061/info ASPIntranet is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...
Next Gen Portfolio Manager Default.ASP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25195/info Next Gen Portfolio Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
Estate Agent Manager <= 1.3 - (default.asp) Login Bypass Vulnerability
No description provided by source. Title : Estate Agent Manager = v1.3 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0 from admin ajann,Turkey ... Im not Hacker! milw0rm.com 2006-11-13...
CIS Manager CMS - SQL Injection
No description provided by source. + Sql Injection on CIS Manager CMS + Date: 01/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.construtiva.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: default.asp + Dork :...
VUNET Mass Mailer 'default.asp' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26522/info Mass Mailer is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...
ClickContact Default.ASP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21302/info ClickContact is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
CVE-2013-4722
Multiple cross-site scripting XSS vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 url, 3 qstr parameter...
CVE-2013-4722
CVE-2013-4722 affects Acora CMS (DDSN cm3 Acora CMS) prior to or within versions 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1. The vulnerability is a reflected cross-site scripting (XSS) in Admin/login/default.asp caused by insufficient input validation and lack of output escaping for parameters us...
CIS Manager CMS - SQL Injection
CIS Manager CMS - SQL Injection + Sql Injection on CIS Manager CMS + Date: 01/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.construtiva.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: default.asp + Dork :...