EUVD-2008-5920

Malware in sbrugna...

template creature (sql/dd) Multiple Vulnerabilities

No description provided by source. ASP Template Creature DD/SQL Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

CVE-2008-5951

ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for workDB/templatemonster.mdb...

CVE-2008-5950

SQL injection vulnerability in media/medialevel.asp in ASP Template Creature allows remote attackers to execute arbitrary SQL commands via the mcatid parameter...

Sql injection

SQL injection vulnerability in media/medialevel.asp in ASP Template Creature allows remote attackers to execute arbitrary SQL commands via the mcatid parameter...

Improper access control

ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for workDB/templatemonster.mdb...

CVE-2008-5951

ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for workDB/templatemonster.mdb...

CVE-2008-5950

CVE-2008-5950 is a SQL injection vulnerability in media/media_level.asp in ASP Template Creature. The vulnerability allows remote attackers to execute arbitrary SQL commands via the mcatid parameter. According to NVD, the CVSS v2 base score is 7.5 (HIGH) with NETWORK attack vector and low complex...

CVE-2008-5950

SQL injection vulnerability in media/medialevel.asp in ASP Template Creature allows remote attackers to execute arbitrary SQL commands via the mcatid parameter...

CVE-2008-5951

The CVE-2008-5951 entry concerns ASP Template Creature, where sensitive information is stored under the web root with insufficient access control. This allows remote attackers to download the database file via a direct request for workDB/templatemonster.mdb, exposing partial confidentiality (per ...

Template Creature (SQL/DD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Template Creature SQL/DD Multiple Remote Vulnerabilities ========================================================== ASP Template Creature DD/SQL Multiple Remote Vuln...

asptemplate-sqldisclose.txt

ASP Template Creature DD/SQL Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ----------------------------------------------------------- ex...

Template Creature (SQL/DD) Multiple Remote Vulnerabilities

No description provided by source. ASP Template Creature DD/SQL Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

template creature - SQL Injection File Disclosure

template creature - SQL Injection File Disclosure ASP Template Creature DD/SQL Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

template creature - SQL Injection / File Disclosure

ASP Template Creature DD/SQL Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ----------------------------------------------------------- ex...