BPAffiliate Affiliate Tracking – Authentication Bypass
) ) ) ( ( ( ( ( ) )
asp
asp 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Web Wiz NewsPad Express Edition 1.03 – Database File Disclosure
=============================================================
ASPilot Pilot Cart 7.3 – ‘newsroom.asp’ SQL Injection
# Title: [ASPilot Pilot Cart 7.3 SQL Injection]
ASPilot Pilot Cart 7.3 – Multiple Vulnerabilities
# Title: [ASPilot Pilot Cart 7.3 multiple vulnerabilities]
Angel Learning Management System 7.3 – ‘pdaview.asp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/44689/info
Site2Nite Business eListings – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Digger Solutions NewsLetter Open Source – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Online Work Order System (OWOS) Professional Edition – Authentication Bypass
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Comrie Software Pay Roll Time Sheet & Punch Card – Authentication Bypass
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Site2Ntite Vacation Rental (VRBO) Listings – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Douran Portal 3.9.7.55 – Arbitrary File Upload / Cross-Site Scripting
source: https://www.securityfocus.com/bid/44594/info
douran portal 3.9.7.55 – Multiple Vulnerabilities
===========================================================
Kisisel Radyo Script – Multiple Vulnerabilities
Kisisel Radyo Script - Multiple Vulnerabilities
Microsoft ASP.NET – Padding Oracle File Download (MS10-070)
#!/usr/bin/ruby -w
Site2Nite Auto e-Manager – SQL Injection
==================================================
xWeblog 2.2 – ‘arsiv.asp?tarih’ SQL Injection
#!/usr/bin/env python
xWeblog 2.2 – ‘oku.asp?makale_id’ SQL Injection
===================================================
Microsoft ASP.NET – Padding Oracle (MS10-070)
# Source: http://blog.mindedsecurity.com/2010/10/breaking-net-encryption-with-or-without.html
Cilem Haber 1.4.4 (Tr) – Database Disclosure
#!/usr/bin/env python
TradeMC E-Ticaret – SQL Injection / Cross-Site Scripting
===================================================
SmarterMail < 7.2.3925 - LDAP Injection
########################################################################
Bka Haber 1.0 (Tr) – File Disclosure
#!/usr/bin/env python
gokhun asp stok 1.0 – Multiple Vulnerabilities
============================================
SmarterTools SmarterStats 5.3.3819 – ‘frmHelp.aspx’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/43110/info
Micronetsoft Rental Property Management Website – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Micronetsoft RV Dealer Website – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
DMXReady Members Area Manager – Persistent Cross-Site Scripting
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
DMXready Polling Booth Manager – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Shop Creator 4.0 – SQL Injection
#########################################################
netStartEnterprise 4.0 – SQL Injection
=======================================
T-dreams Announcement Script – SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=