150 matches found
aria-portal.txt
Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=63 ----------------------------------------------------------- Software: DuPortal Pro 3.4 Method: SQL Injection Vendor: http://duware.com PoC:...
[Aria-Security Team] DuWare DuPaypal SQL Injection Vuln
Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory: http://www.aria-security.com/forum/showthread.php?t=62 ----------------------------------------------------------- Software: DuPaypal Method: SQL Injection Vendor:...
[Aria-Security Team] DuWare DuDownloads SQL Injection Vuln
Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory: http://www.aria-security.com/forum/showthread.php?t=60 ----------------------------------------------------------- Software: DuDownload Method: SQL Injection Vendor: http://duware.co...
[Aria-Security Team] DuWare DuForum SQL Injection Vuln
Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory: http://www.aria-security.com/forum/showthread.php?t=58 ----------------------------------------------------------- Software: DUdForum 3.0 Method: http://duware.com Vendor: PoC:...
[Aria-Security Team] DuWare DuPortal SQL Injection Vuln
Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory: http://www.aria-security.com/forum/showthread.php?t=63 ----------------------------------------------------------- Software: DuPortal Pro 3.4 Method: SQL Injection Vendor:...
DUdownload 1.01.1 - detail.asp Multiple SQL Injections
DUdownload 1.01.1 - detail.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21405/info Multiple DuWare products are prone to multiple SQL-injection vulnerabilities because they fail to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...
[Aria-Security Team] DuWare DuNews SQL Injection Vuln
Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory: http://www.aria-security.com/forum/showthread.php?t=61 ----------------------------------------------------------- Software: DuNews Method: SQL Injection Vendor: http://www.duware.co...
DUdownload 1.0/1.1 - 'detail.asp' Multiple SQL Injections
source: https://www.securityfocus.com/bid/21405/info Multiple DuWare products are prone to multiple SQL-injection vulnerabilities because they fail to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...
CVE-2006-4487
DUware DUpoll 3.0 and 3.1 stores private/Dupoll.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords...
CVE-2006-4487
CVE-2006-4487 affects DUware DUpoll 3.0 and 3.1, where a file under the web document root named _private/Dupoll.mdb is stored with insufficient access control. This allows remote attackers to access sensitive information, specifically user credentials such as usernames and passwords. The provided...
CVE-2006-4487
DUware DUpoll 3.0 and 3.1 stores private/Dupoll.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords...
CVE-2006-4487: Undefined Security Weakness
DUware DUpoll 3.0 and 3.1 stores private/Dupoll.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords...
CVE-2006-2428
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw sour...
CVE-2006-2428
The CVE-2006-2428 issue affects DUbanner 3.1 (DUware) via the add.asp endpoint, where uploading files with arbitrary extensions (e.g., ASP) can lead to remote code execution. Root cause cited is weak server-side validation/enforcement that can be bypassed by clients. Impact is remote code executi...
CVE-2006-2428
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw sour...
CVE-2006-2428: Unrestricted Upload of File with Dangerous Type
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw sour...
[SA20102] DUbanner Insecure File Upload Vulnerability
TITLE: DUbanner Insecure File Upload Vulnerability SECUNIA ADVISORY ID: SA20102 VERIFY ADVISORY: http://secunia.com/advisories/20102/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: DUware DUbanner 3.x http://secunia.com/product/2848/ DESCRIPTION: Dj ReMix has...
CVE-2005-4166
Cross-site scripting XSS vulnerability in password.asp in DUWare DUportal Pro 3.4.3 allows remote attackers to inject arbitrary web script or HTML via the result parameter...
CVE-2005-4166
The CVE-2005-4166 entry documents a Cross-site Scripting (XSS) vulnerability in DUWare DUportal Pro 3.4.3, exploitable via the result parameter in password.asp. The affected component is password.asp within DUportal Pro 3.4.3; the root cause is input handling allowing script/HTML injection. The p...