Spaw Editor 1.0/2.0 – Arbitrary File Upload
# Tilte: Spaw Editor v1.0 & 2.0 Remote File Upload .
asp
asp 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Renista CMS – SQL Injection
Author:Amir Afghanian
Platnik 8.1.1 – Multiple SQL Injections
source: https://www.securityfocus.com/bid/40201/info
SelfComposer CMS – SQL Injection
All the input passed via "idprod", "idpadrerif", "idreferenza",
e-webtech – ‘page.asp’ SQL Injection
-------------------------------------------------------------------------------------------
Consona – ‘n6plugindestructor.asp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39999/info
Administrador de Contenidos – Admin Authentication Bypass
************************************************************ ** Administrador de Contenidos Admin Login Bypass vulne...
ArticleLive (Interspire Website Publisher) – SQL Injection
# Author : ra3ch
Mesut Manþet Haber 1.0 – Authentication Bypass
==============================================================================
Comersus 8 Shopping Cart – SQL Injection / Cross-Site Request Forgery
# Exploit Title:SQL Injection and CSRF Vulnerability in Comersus 8 Shopping Cart
Acart 2.0 Shopping Cart – Software Backup Dump
========================================================================================
CactuShop – User Invoices Persistent Cross-Site Scripting
User Invoices Persistent XSS Vulnerability in CactuShop
Ziggurat Farsi CMS – ‘bck’ Directory Traversal
source: https://www.securityfocus.com/bid/39534/info
Ziggurat Farsi CMS – ‘id’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/39311/info
School Management System Pro 6.0.0 – Backup Dump
========================================================================================
My School Script – Database Disclosure
========================================================================================
Mp3 MuZik – Database Disclosure
========================================================================================
Espinas CMS – SQL Injection
#################################################################
SafeSHOP 1.5.6 – Cross-Site Scripting / Multiple Cross-Site Request Forgery Vulnerabilities
# Exploit Title: SafeSHOP
Asp – comersus7F Shopping Cart Software Backup Dump
========================================================================================
Pars CMS – ‘RP’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/38734/info
Zigurrat Farsi CMS – ‘/manager/textbox.asp’ SQL Injection
source: https://www.securityfocus.com/bid/38719/info
SamaGraph CMS – ‘inside.aspx’ SQL Injection
source: https://www.securityfocus.com/bid/39892/info
Max Network Technology BBSMAX 4.2 – ‘threadid’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38630/info
IBM ENOVIA SmarTeam – ‘LoginPage.aspx’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38612/info
ASPCode CMS 1.5.8 – ‘default.asp’ Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38601/info
Max Network Technology BBSMAX 4.2 – ‘post.aspx’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38592/info
Pre E-Learning Portal – ‘search_result.asp’ SQL Injection
source: https://www.securityfocus.com/bid/38582/info
Spectrum Software WebManager CMS – ‘pojam’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38573/info
BBSXP 2008 – ‘ShowPost.asp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38542/info
Al Sat Scripti – Database Disclosure
========================================================================================
Majoda CMS – Authentication Bypass
------------------------------------------------------
Pre Classified Listings – SQL Injection
=================================================================
bispage – Bypass
# Exploit Title: [ bispage Bypass Vulnerability]
Portrait Software Portrait Campaign Manager 4.6.1.22 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38252/info
Infragistics WebHtmlEditor 7.1 – Multiple Vulnerabilities
---------------------------------------------------------------------------------------------------------------------...
MOJO’s IWms 7 – SQL Injection / Cross-Site Scripting
# Exploit Title: MOJO's IWMS
fipsForum 2.6 – Remote Database Disclosure
==============================================================================
DA Mailing List System 2 – Multiple Vulnerabilities
#######################################################################
RaakCMS – Multiple Vulnerabilities
#################################################################
eWebeditor ASP Version – Multiple Vulnerabilities
#################################################################
eWebeditor – Directory Traversal
#################################################################
Asp VevoCart Control System 3.0.4 – Database Disclosure
========================================================================================
E-membres 1.0 – Remote Database Disclosure
==============================================================================
Egreetings 1.0b – Remote Database Disclosure
========================================================================
ABB 1.1 – Forum Remote Database Disclosure
==============================================================================
Erolife AjxGaleri VT – Database Disclosure
==============================================================================
VP-ASP Shopping Cart 7.0 – Database Disclosure
========================================================================================
Net Gitar Shop 1.0 – Database Disclosure
========================================================================================