Allinta CMS 22.07.2010 – Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42320/info
asp
asp 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
DT Centrepiece 4.5 – Cross-Site Scripting / Security Bypass
source: https://www.securityfocus.com/bid/42243/info
AKY Blog – SQL Injection
===================================================
Mayasan Portal 2.0 – ‘haberdetay.asp’ SQL Injection
########################################################################################
Mayasan Portal 2.0 – ‘makaledetay.asp’ SQL Injection
===================================================
Caner Hikaye Script – SQL Injection
===================================================
ClickAndRank Script – Authentication Bypass
# Exploit Title: ClickAndRank Script Authentication Bypass
i-Gallery – Multiple Vulnerabilities
==============================================================
ClickGallery Server – SQL Injection
==============================================================
KMSoft GB – SQL Injection
==============================================================
MooreAdvice – ‘productlist.asp’ SQL Injection
# Exploit Title: MooreAdvice (productlist.asp) SQL injection Vulnerable
VGM Forbin – ‘article.asp’ SQL Injection
# Exploit Title: VGM Forbin (article.asp) SQL injection Vulnerable
SIDA University System – SQL Injection
# Author: K053
Setiran CMS – Blind SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Iatek PortalApp 3.3/4.0 – ‘login.asp’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/41224/info
Lois Software WebDB 2.0A Script – Multiple SQL Injections
source: https://www.securityfocus.com/bid/41124/info
PHPortal 1.2 – ‘gunaysoft.php’ Remote File Inclusion
# Tilte: phportal_1.2 (gunaysoft.php) Remote File Include Vulnerability
Boat Classifieds – ‘printdetail.asp?Id’ SQL Injection
##################################################################################################
webConductor – ‘default.asp’ SQL Injection
source: https://www.securityfocus.com/bid/41042/info
Boat Classifieds – SQL Injection
Boat Classifieds
Ananda Image Gallery – SQL Injection
Exploit Title:Ananda Image Gallery SQL Vulnerable
AspTR EXtended – Cross-Site Request Forgery
##################################################################################
IISWorks FileMan – fileman.mdb Remote User Database Disclosure
# Exploit Title: IISWorks FileMan fileman.mdb Remote User Database
Acuity CMS 2.7.1 – SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
Restaurant Listing with Online Ordering – SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
Business Classified Listing – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
SAS Hotel Management System – ‘notfound’ SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
Smart ASP Survey – Cross-Site Scripting / SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
Real-time ASP Calendar – SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
Digital Interchange Calendar – SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
Digital Interchange Document Library – SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
BDSMIS TraX with Payroll – SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
BrightSuite Groupware – SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
VU Web Visitor Analyst – Authentication Bypass
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
VU Mass Mailer – Authentication Bypass
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
VU Case Manager – Authentication Bypass
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
Netvolution CMS 2.x – SQL Injection Script
#!/usr/bin/perl
Pars Design CMS – Arbitrary File Upload
#################################################################
Online Notebook Manager – SQL Injection
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
iClone – SQL Injection
1 ########################################## 1
Virtual Real Estate Manager 3.5 – SQL Injection
======================================================
Web Wiz Forums 9.68 – SQL Injection
=========================================
Ticimax E-Ticaret – SQL Injection
# Exploit Title: [Ticimax E-Ticaret ( SQL Injection ) ]
Patient folder (THEME ASP) – SQL Injection
============================================================
Blaze Apps – Multiple Vulnerabilities
##########################www.BugReport.ir##############################
cyberhost – ‘default.asp’ SQL Injection
source: https://www.securityfocus.com/bid/40357/info
Rave Creations/UHM – ‘artists.asp’ SQL Injection
************************************************************ ** (artists.asp) SQL Injection Vulnerability ***********...
DotNetNuke – Arbitrary File Upload
************************************************************ ** DotNetNuke Remote File upload Vulnerability *********...
Asset Manager – Arbitrary File Upload
************************************************************ ** Asset Manager Remote File upload Vulnerability ** ******...