kunstsite.dk XSS vulnerability

Vulnerable URL: http://www.kunstsite.dk/www/User/profile.asp?favourite=1"...

creazionialex.com XSS vulnerability

Vulnerable URL: http://www.creazionialex.com/profile.asp?root=2=1"...

PT-2012-5178

Name of the Vulnerable Software and Affected Versions ASP-DEv XM Forums version RC3 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved by exploiting the id parameter in the following API endpoints: "profile.asp", "forum.asp", or "topic.asp"...

CVE-2012-4060: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 profile.asp, 2 forum.asp, or 3 topic.asp...

Parodia 6.8 - employer-profile.asp SQL Injection

Parodia 6.8 - employer-profile.asp SQL Injection Exploit Title: Parodia 6.8 and early SQL injection Date: June 24 2012 Exploit Author:Carlos Mario Penagos Hollmann Vendor Homepage: http://www.parodia.net/ Version: 6.8 CVE : CVE-2011-2751 http://server/' --- blind SQL...

Parodia 6.8 employer-profile.asp Blind SQL Injection Vulnerability

Exploit for asp platform in category web applications Exploit Title: Parodia 6.8 and early SQL injection Date: June 24 2012 Exploit Author:Carlos Mario Penagos Hollmann Vendor Homepage: http://www.parodia.net/ Version: 6.8 CVE : CVE-2011-2751 http://server/' --- blind SQL...

AspBB Forum "profile.asp & default.asp" XSS Vulnerability

This xss works on Aspbb Forums Homapage : http://www.aspbb.org Version : 0.5.2 Exploit: http://www.example.com/default.asp?action="scriptalert'Xss Vulnerability';/script http://www.example.com/profila.asp?get="scriptalert'Xss Vulnerability';/script&URL=2FDefault2Easp3F TeufeL // Netkabus.Com...

CVE-2005-4259: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the 1 TID parameter in topic.asp, 2 FORUMID parameter in forum.asp, and 3 PROFILEID parameter in profile.asp. NOTE: the provenance of this issue is unknown; the details are obtained...

CVE-2004-2145: Undefined Security Weakness

SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands via the 1 sortdir or 2 criteria parameter to ladder-log.asp or the 3 memberid or 4 teamid parameter to view-profile.asp...

CVE-2004-1555

CVE-2004-1555 affects BroadBoard Instant ASP Message Board. The description documents multiple SQL injection flaws in the application, exploitable via specific parameters: keywords in search.asp, handle in profile.asp, txtUserHandle in reg2.asp, and txtUserEmail in forgot.asp. The underlying issu...

CVE-2004-1555: Undefined Security Weakness

Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the 1 keywords parameter to search.asp, 2 handle parameter to profile.asp, 3 txtUserHandle parameter to reg2.asp or 4 txtUserEmail parameter to forgot.asp...

CVE-2004-1555

Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the 1 keywords parameter to search.asp, 2 handle parameter to profile.asp, 3 txtUserHandle parameter to reg2.asp or 4 txtUserEmail parameter to forgot.asp...

PD9 Software MegaBBS 2.0/2.1 - 'view-profile.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/11253/info MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP response splitting and SQL injection attacks. MegaBBS versions 2.0 and...

CVE-2002-0521: Undefined Security Weakness

Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nuke users via script in 1 the name parameter in downloads.asp, 2 the message parameter in Post.asp, or 3 a web site URL in profile.asp...