asp-nuke asp-nuke rc1 vulnerabilities and exploits

(subscribe to this query)

5.1

CVSSv2

Cross-site scripting vulnerabilities in ASP-Nuke RC2 and previous versions allow remote malicious users to execute script or gain privileges as other ASP-Nuke users via script in (1) the name parameter in downloads.asp, (2) the message parameter in Post.asp, or (3) a web site URL...

Asp-nuke Asp-nuke Rc2 Asp-nuke Asp-nuke Rc1

7.5

CVSSv2

ASP-Nuke RC2 and previous versions allows remote malicious users to bypass authentication and gain privileges by modifying the "pseudo" cookie.

Asp-nuke Asp-nuke Rc1 Asp-nuke Asp-nuke Rc2

5

CVSSv2

ASP-Nuke RC2 and previous versions allows remote malicious users to list all logged-in users by submitting an invalid "pseudo" cookie.

Asp-nuke Asp-nuke Rc2 Asp-nuke Asp-nuke Rc1

5

CVSSv2

ASP-Nuke RC2 and previous versions allows remote malicious users to determine the absolute path of the server by (1) calling database-inc.asp with incorrect cookies, or (2) calling Post.asp with certain arguments, which leak the pathname in an error message.

Asp-nuke Asp-nuke Rc1 Asp-nuke Asp-nuke Rc2

8.5

CVSSv2

default.asp in ASP-Nuke Community 1.5 and previous versions allows remote malicious users to gain privileges by setting certain pseudo cookie values.

Asp-nuke Asp-nuke 1.0 Asp-nuke Asp-nuke 1.2 Asp-nuke Asp-nuke 1.3 Asp-nuke Asp-nuke Rc2 Asp-nuke Asp-nuke Rc3 Asp-nuke Asp-nuke 1.5 Asp-nuke Asp-nuke Rc1

1 EDB exploit

7.5

CVSSv2

Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote malicious users to execute script as other ASP-Nuke users by embedding it within an IMG tag.

Asp-nuke Asp-nuke Rc1

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook