shop7z投票处post 注入

简要描述： vote.asp 详细说明： vote.asp 14-22 if rad"" and request.cookies"votestat""Y" then sql="update ediaocha2 set shuliang=shuliang+1 where id="&rad 'response.write sql 'response.end conn.executesql votenews="1" response.cookies"votestat"="Y" end if % 漏洞证明： F:\sqlmappython sqlmap.py -u...

shop7z 商品列表处搜索型注入

简要描述： productlist.asp文件注入 详细说明： productlist.asp文件124-146 "" then sqlcondition = sqlcondition & " and kind like '"&kind&"%' or kind2 like '"&kind&"%' " end if if cx"" then sqlcondition = sqlcondition & " and good='1' " end if if hot"" then sqlcondition = sqlcondition & " and hot='1' " end if if...

Shop7z sql注入1

简要描述： 详细说明： http://www.shop7z.com/Demo/orderprint.asp?id=1 17:09:55 INFO the back-end DBMS is Microsoft Access web server operating system: Windows 2003 or XP web application technology: ASP.NET, Microsoft IIS 6.0 back-end DBMS: Microsoft Access 17:09:55 INFO fetching tables for database:...

IISWorks FileMan fileman.mdb Remote User Database Disclosure

No description provided by source. Exploit Title: IISWorks FileMan fileman.mdb Remote User Database Disclosure Disclosure Date: July 5, 2005 Author: Known Vulnerability Software Link: http://www.scriptdungeon.com/scripts/asp/FileManASP.rar Version: OSVDB: 17824 Security Tracker ID: 1014383 Found...

Snapshot Viewer for Microsoft Access ActiveX Control Arbitrary File Download

No description provided by source. $Id: ms08041snapshotviewer.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Comrie Software Pay Roll Time Sheet & Punch Card Authentication Bypass

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass Vulnerability Version:1.0 Price:50$ Vendor url:http://www.comriesoftware.net/codewidgets/product.aspx?key=123 Published:...

SmartWin CyberOffice Shopping Cart 2.0 Client Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1734/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. It is possible for a remote user to gain read access to the private...

saspcms 0.9 - Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: SASPCMS Multiple Vulnerabilities Vendor: http://www.lgasoft.com Vulnerable Version: 0.9 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: SASPCMS is an ASP Conte...

Snitz Forums 2000 Register.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7549/info Snitz Forums 2000 is ASP-based web forum software. It runs on Microsoft Windows operating systems. Snitz is back-ended by a database and supports Microsoft Access 97/2000, SQL Server 6.5/7.0/2000 and MySQL. It i...

Microsoft Access 97/2000/2002 Snapshot Viewer ActiveX Control Parameter Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8536/info Microsoft Access Snapshot Viewer is prone to a remote buffer-overflow condition because the software fails to perform sufficient boundary checks on user-supplied parameters. Presumably, a remote attacker may be...

Microsoft Access ACCDB Memory Corruption - Ver2 (CVE-2013-3155)

A code execution vulnerability has been reported in Microsoft Access. The vulnerability is due to an error in the way that Microsoft Access parses ACCDB files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Access Snapshot Viewer ActiveX Control Arbitrary File Download - Ver2 (CVE-2008-2463)

Microsoft Snapshot Viewer is an application that allows viewing of snapshots created with any version of Microsoft Access. A remote code execution vulnerability has been discovered in the Snapshot Viewer for Microsoft Access. The vulnerability is due to an error in the Snapshot Viewer ActiveX...

Oracle Outside In Microsoft Access 1.x Parser Buffer Overflow (CVE-2013-5791)

A stack buffer overflow vulnerability exists in Oracle Outside-In, a set of libraries used to decode many file formats. The vulnerability is due to an error while processing Microsoft Access 1.x database files .mdb. This vulnerability can be exploited by causing an application that uses the...

Microsoft Access Memory Corruption (MS13-074; CVE-2013-3155)

A remote code execution vulnerability exists in Microsoft Access...

Microsoft Access ACCDB File Memory Corruption (MS13-074; CVE-2013-3157)

A memory corruption vulnerability has been reported in Microsoft Access...

CVE-2013-5791

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters. NOTE: the previous information is from the October 2013 CPU. Oracle has...

Stack overflow

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters. NOTE: the previous information is from the October 2013 CPU. Oracle has...

CVE-2013-5791

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters. NOTE: the previous information is from the October 2013 CPU. Oracle has...

CVE-2013-5791

CVE-2013-5791 is a stack-based buffer overflow in Oracle Outside In Technology’s Microsoft Access 1.x database file parser used by IBM Content Manager/Content Foundation and related IBM products. The vulnerability allows code execution or denial of service when processing crafted MDB files; IBM d...

Oracle Outside In Microsoft Access 1.x parser stack buffer overflow

Overview Oracle Outside In contains a stack buffer overflow vulnerability in the Microsoft Access 1.x database file parser, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Oracle Outside In is a set of libraries that can decode over...