CosmoQuest – Authentication Bypass
==========================================
asp
asp 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Web Wiz Forums 9.5 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/46131/info
Web Wiz Forum – Injection
##################################################################
EAFlashUpload 2.5 – Arbitrary File Upload
# Exploit Title: EAFlashUpload v 2.5 File Arbitrary Upload
Element-IT PowUpload 1.3 – Arbitrary File Upload
# Exploit Title: Element-IT PowUpload 1.3 File Arbitrary Upload
Douran 3.9.7.8 – File Download/Source Code Disclosure
# Title: [Douran Portal File Download/Source Code Disclosure Vulnerability]
SmarterMail 8.0 – Multiple Cross-Site Scripting Vulnerabilities
Author: Hoyt LLC Research
SmarterStats 6.0 – Multiple Vulnerabilities
Hoyt LLC Research | SmarterStats 6.0, OS Command Execution, Directory Traversal, DoS, Coordinated Disclosure
SmarterMail 7.3/7.4 – Multiple Vulnerabilities
Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me
Luch Web Designer – Multiple SQL Injections
Title : Web Designed by LUCH Vulnerable to SQL Injection
EzPub Simple Classic ASP CMS – SQL Injection
Title: EzPub - Simple Classic ASP CMS Vulnerable to SQL Injection
Kodak InSite 5.5.2 – ‘/Pages/login.aspx?Language’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/46762/info
Kodak InSite 5.5.2 – ‘/Troubleshooting/DiagnosticReport.asp?HeaderWarning’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/46762/info
RaksoCT – Multiple SQL Injections
Title : RaksoCT Web Design Vulnerable to Multiples SQL Injection
DIY Web CMS – Multiple Vulnerabilities
SQL and XSS in DIY Web CMS
Rae Media Real Estate Multi Agent – SQL Injection
source: https://www.securityfocus.com/bid/45212/info
Rae Media Real Estate Single Agent – SQL Injection
source: https://www.securityfocus.com/bid/45211/info
BlogEngine.NET 1.6 – Directory Traversal / Information Disclosure
source: https://www.securityfocus.com/bid/45681/info
Sigma Portal – ‘ShowObjectPicture.aspx’ Denial of Service
source: https://www.securityfocus.com/bid/45588/info
Elcom CommunityManager.NET – Authentication Bypass
Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004
Oto Galery 1.0 – Multiple SQL Injections
+Name : Oto Galery v1.0 *www.cyber-warrior.org*
Virtual Store Open 3.0 – Acess SQL Injection
#!/usr/bin/perl
SolarWinds Orion Network Performance Monitor (NPM) 10.1 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/45257/info
SOOP Portal Raven 1.0b – Arbitrary File Upload
# Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability
SOOP Portal 2.0 – Arbitrary File Upload
#################################################################
HotWebScripts HotWeb Rentals – ‘resorts.asp’ SQL Injection
# Author: R4dc0re
Ecommercemax Solutions Digital Goods Seller – SQL Injection
# Author: R4dc0re
Gatesoft Docusafe 4.1.0 – SQL Injection
# Author: R4dc0re
Techno Dreams FAQ Manager Package 1.0 – ‘faqlist.asp’ SQL Injection
source: https://www.securityfocus.com/bid/45202/info
Techno Dreams Articles & Papers Package 2.0 – ‘ArticlesTablelist.asp’ SQL Injection
source: https://www.securityfocus.com/bid/45201/info
ASPSiteWare Contact Directory 1.0 – SQL Injection
# Author: R4dc0re
ASPSiteWare ASP Gallery 1.0 – SQL Injection
# Author: R4dc0re
ASPSiteWare JobPost 1.0 – SQL Injection
# Author: R4dc0re
ASPSiteWare Project Reporter – SQL Injection
# Author: R4dc0re
ASPSiteWare Recipe ORGanizer – SQL Injection
# Author: R4dc0re
T-Dreams Job Seekers Package 3.0 – SQL Injection
# Author: R4dc0re
T-Dreams Cars Ads Package 2.0 – SQL Injection
# Author: R4dc0re
Dejcom Market CMS – ‘showbrand.aspx’ SQL Injection
# Exploit Title: [Dejcom Market Cms SQL injection]
DotNetNuke 5.5.1 – ‘InstallWizard.aspx’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/45180/info
Easy Travel Portal 2 – ‘travelbycountry.asp’ SQL Injection
TITLE: Easy Travel Portal "travelbycountry.asp" SQL Injection Vulnerability
Ananda Real Estate 3.4 – ‘list.asp’ Multiple SQL Injections
TITLE: Ananda Real Estate "list.asp" Multiple SQL Injection Vulnerabilities
BugTracker.NET 3.4.4 – Multiple Vulnerabilities
Core Security Technologies - CoreLabs Advisory
BugTracker.NET 3.4.4 – SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/45121/info
MicroNetSoft RV Dealer Website – ‘search.asp’ / showAlllistings.asp’ SQL Injection
TITLE: MicroNetSoft RV Dealer Website Two SQL Injection Vulnerabilities
Acidcat CMS 3.3 – ‘FCKeditor’ Arbitrary File Upload
==============================================================================
Sitefinity CMS – ‘ASP.NET’ Arbitrary File Upload
=============================================================
BPRealestate Real Estate – Authentication Bypass
) ) ) ( ( ( ( ( ) )
BPConferenceReporting Web Reporting – Authentication Bypass
) ) ) ( ( ( ( ( ) )
BPDirectory Business Directory – Authentication Bypass
) ) ) ( ( ( ( ( ) )