asp

InnovaStudio WYSIWYG Editor 5.4 – Unrestricted File Upload / Directory Traversal

# Exploit Title: InnovaStudio WYSIWYG Editor 5.4 - Unrestricted File Upload / Directory Traversal

ENTAB ERP 1.0 – Username PII leak

Exploit Title: ENTAB ERP 1.0 - Username PII leak

Snitz Forum v1.0 – Blind SQL Injection

# Exploit Title: Snitz Forum v1.0 - Blind SQL Injection

EQ Enterprise management system v2.2.0 – SQL Injection

Exploit Title: EQ Enterprise management system v2.2.0 - SQL Injection

Password Manager for IIS v2.0 – XSS

# Exploit Title: Password Manager for IIS v2.0 - XSS

wkhtmltopdf 0.12.6 – Server Side Request Forgery

# Exploit Title: wkhtmltopdf 0.12.6 - Server Side Request Forgery

Build Smart ERP 21.0817 – ‘eidValue’ SQL Injection (Unauthenticated)

# Exploit Title: Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated)

HelloWeb 2.0 – Arbitrary File Download

# Exploit Title: HelloWeb 2.0 - Arbitrary File Download

Enhanced Multimedia Router 3.0.4.27 – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Enhanced Multimedia Router 3.0.4.27 - Cross-Site Request Forgery (Add Admin)

OLK Web Store 2020 – Cross-Site Request Forgery

# Exploit Title: OLK Web Store 2020 - Cross-Site Request Forgery

Rumpus FTP Web File Manager 8.2.9.1 – Reflected Cross-Site Scripting

# Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting

Crystal Live HTTP Server 6.01 – Directory Traversal

# Title: Crystal Live HTTP Server 6.01 - Directory Traversal

Web Wiz Forums 12.01 – ‘PF’ SQL Injection

# Exploit Title: Web Wiz Forums 12.01 - 'PF' SQL Injection

microASP (Portal+) CMS – ‘pagina.phtml?explode_tree’ SQL Injection

[+] Sql Injection on microASP (Portal+) CMS

Skyworth GPON HomeGateways and Optical Network Terminals – Stack Overflow

'''

Advantech WebAccess SCADA 8.3.2 – Remote Code Execution

# Exploit Title: Advantech WebAccess SCADA 8.3.2 - Remote Code Execution

IssueTrak 7.0 – SQL Injection

================

ASP.NET jVideo Kit – ‘query’ SQL Injection

# Exploit Title: ASP.NET jVideo Kit - 'query' SQL Injection

totemomail Encryption Gateway 6.0.0 Build 371 – Cross-Site Request Forgery

Tenda FH303/A300 Firmware v5.07.68_EN – Remote DNS Change

#

Tenda W3002R/A302/w309r Wireless Router v5.07.64_en – Remote DNS Change (PoC)

#

Tenda W316R Wireless Router 5.07.50 – Remote DNS Change

#

Tenda W308R v2 Wireless Router 5.07.48 – (Cookie Session) Remote DNS Change

#

EPIC MyChart – X-Path Injection

# Exploit Title: Epic Systems Corporation MyChart X-Path Injection

JitBit HelpDesk < 9.0.2 - Authentication Bypass

# Exploit Title: JitBit HelpDesk

DigiAffiliate 1.4 – Cross-Site Request Forgery (Update Admin)

#!/usr/local/bin/python

Digileave 1.2 – Cross-Site Request Forgery (Update Admin)

#!/usr/local/bin/python

Digirez 3.4 – Cross-Site Request Forgery (Update Admin)

#!/usr/local/bin/python

ICAffiliateTracking 1.1 – Authentication Bypass

# # # # #

Sitefinity CMS 9.2 – Cross-Site Scripting

# Exploit Title: Stored Cross Site Scripting (XSS) in Progress Sitefinity CMS 9.2

Kronos Telestaff < 2.92EU29 - SQL Injection

Software: Kronos Telestaff Web Application

Cisco EPC 3925 – Multiple Vulnerabilities

# Title: Cisco EPC 3925 Multiple Vulnerabilities

Cisco EPC 3928 – Multiple Vulnerabilities

# Title: Cisco EPC 3928 Multiple Vulnerabilities

Notilus Travel Solution Software 2012 R3 – SQL Injection

Exploit Title: Notilus SQL injection

AfterLogic WebMail Pro ASP.NET 6.2.6 – Administrator Account Disclosure via XML External Entity Injection

1. ADVISORY INFORMATION

DotNetNuke 07.04.00 – Administration Authentication Bypass

# Exploit Title: DotNetNuke 07.04.00 Administration Authentication Bypass

Thru Managed File Transfer Portal 9.0.2 – SQL Injection

-----BEGIN PGP SIGNED MESSAGE-----

WhatsUp Gold 16.3 – Remote Code Execution

#

Kaseya Virtual System Administrator (VSA) – Multiple Vulnerabilities (2)

Kaseya VSA is an IT management platform for small and medium corporates.

Kaseya Virtual System Administrator (VSA) 7.0 < 9.1 - (Authenticated) Arbitrary File Upload

#!/usr/bin/ruby

Vifi Radio 1.0 – Cross-Site Request Forgery

.__ _____ _______

Orchard CMS 1.7.3/1.8.2/1.9.0 – Persistent Cross-Site Scripting

-----------------

C2Box 4.0.0(r19171) – Cross-Site Request Forgery

Title: Cross-Site Request Forgery (CSRF) Vulnerability in C2Box application Allows adding an Admin User or reset any...

HttpCombiner ASP.NET – Remote File Disclosure

# Exploit Title: HttpCombiner ASP.NET Remote File Disclosure Vulnerability

Epicor Enterprise 7.4 – Multiple Vulnerabilities

"Epicor Enterprise vulnerabilities"

Onlineon E-Ticaret – Database Disclosure

#!/usr/bin/env python

LiveWorld Multiple Products – Cross Site Scripting

LiveWorld Cross Site Scripting

DevExpress ASPxFileManager 10.2 < 13.2.8 - Directory Traversal

Advisory: Directory Traversal in DevExpress ASP.NET File Manager

CIS Manager – ’email’ SQL Injection

source: https://www.securityfocus.com/bid/67442/info

CIS Manager CMS – SQL Injection

[+] Sql Injection on CIS Manager CMS