asp

asp 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

ASP-Nuke 2.0.7 – ‘gotourl.asp’ Open Redirect

[+] ASP-Nuke 2.0.7 - Open Redirect Vulnerability in gotourl

2014-03-29 felipe andrian webapps

Procentia IntelliPen 1.1.12.1520 – ‘data.aspx’ Blind SQL Injection

CVE: CVE-2014-2043

2014-03-12 Portcullis webapps

Kentico CMS 7.0.75 – User Information Disclosure

# Exploit Title: Kentico CMS User Enumeration Bug

2014-03-10 Charlie Campbell & Lyndon Mendoza webapps

eshtery CMS – ‘FileManager.aspx’ Local File Disclosure

source: https://www.securityfocus.com/bid/65740/info

2014-02-22 peng.deng webapps

SmarterMail Enterprise and Standard 11.x – Persistent Cross-Site Scripting

2014-01-17 Saeed reza Zamanian webapps

CMS Afroditi – ‘id’ SQL Injection

source: https://www.securityfocus.com/bid/64572/info

2013-12-30 projectzero labs webapps

Etoshop B2B Vertical Marketplace Creator – Multiple SQL Injections

source: https://www.securityfocus.com/bid/64332/info

2013-12-14 R3d-D3V!L webapps

Dynamic Biz Website Builder ‘QuickWeb’ 1.0 – ‘/login.asp’ Multiple Field SQL Injections / Authentication Bypass

source: https://www.securityfocus.com/bid/64371/info

2013-12-13 R3d-D3V!L webapps

Dynamic Biz Website Builder (QuickWeb) 1.0 – ‘/apps/news-events/newdetail.asp?id’ SQL Injection

source: https://www.securityfocus.com/bid/64371/info

2013-12-13 R3d-D3V!L webapps

Kaseya < 6.3.0.2 - Arbitrary File Upload

( , ) (,

2013-11-18 Security-Assessment.com webapps

RASPcalendar 1.01 (ASP) – Admin Login

---------------------------------------------------

2013-11-08 Hackeri-AL UAH-Crew webapps

AspxCommerce 2.0 – Arbitrary File Upload

# Exploit Title: AspxCommerce v2.0 - Arbitrary File Upload Vulnerability

2013-09-19 SANTHO webapps

Flo CMS – ‘archivem’ SQL Injection

source: https://www.securityfocus.com/bid/62186/info

2013-09-03 ACC3SS webapps

DotNetNuke 6.1.x – Cross-Site Scripting

source: https://www.securityfocus.com/bid/61770/info

2013-08-13 Sajjad Pourali webapps

BMC Service Desk Express 10.2.1.95 – Multiple Vulnerabilities

Classification: NON SENSITIVE INFORMATION RELEASABLE TO THE PUBLIC

2013-07-13 Nuri Fattah webapps

Corda .NET Redirector – ‘redirector.corda’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/61156/info

2013-07-12 Adam Willard webapps

Corda Highwire – ‘Highwire.ashx’ Full Path Disclosure

source: https://www.securityfocus.com/bid/61152/info

2013-07-12 Adam Willard webapps

C2 WebResource – ‘File’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/58838/info

2013-04-03 anonymous webapps

Matrix42 Service Store – ‘default.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/59290/info

2013-03-06 43zsec webapps

MIMEsweeper For SMTP – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58012/info

2013-02-18 Anastasios Monachos webapps

Advantech Webaccess HMI/SCADA Software – Persistence Cross-Site Scripting

##############################################################################

2013-01-08 SecPod Research webapps

SelectSurvey CMS – ‘ASP.NET’ Arbitrary File Upload

=============================================================

2012-12-21 040 webapps

FCKEditor Core ASP 2.6.8 – Arbitrary File Upload Protection Bypass

- Title: FCKEditor 2.6.8 ASP Version File Upload Protection bypass

2012-11-29 Soroush Dalili webapps

SolarWinds Orion IP Address Manager (IPAM) – ‘search.aspx’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/56342/info

2012-10-31 Anthony Trummer webapps

Knowledge Base Enterprise Edition 4.62.0 – SQL Injection

Exploit Author: Vulnerability-Lab

2012-09-12 Vulnerability-Lab webapps

Cm3 CMS – ‘search.asp’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55395/info

2012-09-05 Crim3R webapps

Ektron CMS 8.5.0 – Multiple Vulnerabilities

Sense of Security - Security Advisory - SOS-12-009

2012-09-05 Sense of Security webapps

XM Forum – ‘search.asp’ SQL Injection

source: https://www.securityfocus.com/bid/55299/info

2012-08-30 Crim3R webapps

Elcom CMS 7.4.10 – Community Manager Insecure Arbitrary File Upload

Elcom CMS - Community Manager Insecure File Upload Vulnerability - Security

2012-08-27 Sense of Security webapps

Web Wiz Forums – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55220/info

2012-08-25 Crim3R webapps

Power-eCommerce – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55216/info

2012-08-25 Crim3R webapps

PolarisCMS – ‘WebForm_OnSubmit()’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/54817/info

2012-08-05 Gjoko Krstic webapps

ipswitch whatsup gold 15.02 – Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution

######################################################################################

2012-07-22 muts webapps

WebsitePanel – ‘ReturnUrl’ Open Redirection

source: https://www.securityfocus.com/bid/54346/info

2012-07-09 Anastasios Monachos webapps

Parodia 6.8 – ’employer-profile.asp’ SQL Injection

# Exploit Title: Parodia 6.8 and early SQL injection

2012-06-25 Carlos Mario Penagos Hollmann webapps

Acuity CMS 2.6.2 – ‘/admin/file_manager/browse.asp?path’ Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/53616/info

2012-05-21 Aung Khant webapps

Acuity CMS 2.6.2 – ‘/admin/file_manager/file_upload_submit.asp’ Multiple Arbitrary File Upload / Code Executions

source: https://www.securityfocus.com/bid/53616/info

2012-05-21 Aung Khant webapps

Fortinet FortiWeb Web Application Firewall – Policy Bypass

BINAR10 Report on Fortinet Fortiweb Findings 02/05/2012

2012-05-07 Geffrey Velasquez webapps

C4B XPhone UC Web 4.1.890S R1 – Cross-Site Scripting

Title:

2012-04-30 Vulnerability-Lab webapps

BBSXP CMS – Multiple SQL Injections

source: https://www.securityfocus.com/bid/53298/info

2012-04-27 Farbod Mahini webapps

XM Forum – ‘id’ Multiple SQL Injections

source: https://www.securityfocus.com/bid/53292/info

2012-04-27 Farbod Mahini webapps

Matthew1471 BlogX – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52730/info

2012-03-27 demonalex webapps

Sitecom WLM-2501 – Multiple Cross-Site Request Forgery Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------...

2012-03-23 Ivano Binetti webapps

SAP Business Objects InfoView System – ‘/webi/webi_modify.aspx?id’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52361/info

2012-03-08 vulns@dionach.com webapps

SAP Business Objects InfoView System – ‘/help/helpredir.aspx?guide’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52361/info

2012-03-08 vulns@dionach.com webapps

SAP Business Objects InfoVew System – ‘listing.aspx?searchText’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/52361/info

2012-03-08 vulns@dionach.com webapps

Iciniti Store – SQL Injection

Sense of Security - Security Advisory - SOS-12-003

2012-03-07 Sense of Security webapps

Raven 1.0 – ‘connector.asp’ Arbitrary File Upload

source: https://www.securityfocus.com/bid/51631/info

2012-01-21 HELLBOY webapps

Acidcat ASP CMS 3.5 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51608/info

2012-01-21 Avram Marius webapps

ARYADAD – Multiple Vulnerabilities

#

2012-01-21 Red Security TEAM webapps