asp-dev vulnerabilities and exploits

(subscribe to this query)

Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote malicious users to execute arbitrary SQL commands via the (1) id parameter to diary_view.asp or (2) view_date parameter to default.asp.

Asp-dev Xm Diary

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote malicious users to execute arbitrary SQL commands via the id parameter to (1) profile.asp, (2) forum.asp, or (3) topic.asp.

Asp-dev Xm Forums -

1 EDB exploit

SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote malicious users to execute arbitrary SQL commands the cat parameter.

Asp-dev Xm Events Diary

1 EDB exploit

SQL injection vulnerability in diary_viewC.asp in ASP-DEv XM Events Diary allows remote malicious users to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Asp-dev Xm Events Diary

ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download the database file via a direct request for diary.mdb.

Asp-dev Xm Events Diary

Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote malicious users to inject arbitrary web script or HTML via the forum_title parameter. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. In additi...

Asp-dev Xm Forum Rc3

1 EDB exploit

Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote malicious users to execute arbitrary SQL commands via the (1) forum_id parameter to forum.asp, (2) unspecified parameters to register.asp, and (3) the "Search For" field in search.asp.

Asp-dev Asp Resources Forum

Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote malicious users to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag.

Asp-dev Xm Forum Rc3

1 EDB exploit

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote malicious users to execute arbitrary SQL commands via the (1) login parameter (aka user field) or the (2) password parameter (aka pass field). NOTE: some of these details are obtain...

Asp-dev Internal E-mail System

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook