Mercator SENTINEL SQL injection allows authentication bypass

Overview Mercator SENTINEL contains an SQL injection vulnerability that could allow an attacker to bypass authentication and access the system with administrative privileges. Description Mercator SENTINEL is a flight safety management system. The login form of the web interface contains an SQL...

CVE-2010-1913

The default configuration of pluginlicense.ini for the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance, when downloaded from a server operated by Telefonica or possibly other companies, contains an incorrect DNS whitelist that include...

CVE-2010-1913

The default configuration of pluginlicense.ini for the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance, when downloaded from a server operated by Telefonica or possibly other companies, contains an incorrect DNS whitelist that include...

CVE-2010-1913

The CVE-2010-1913 issue affects the SdcWebSecureBase interface’s tgctlcm.dll used by Consona Live Assistance, Dynamic Agent, and Subscriber Assistance. When plugins/clients are downloaded from a Telefonica-operated server (or similar), its default pluginlicense.ini contains an incorrect DNS white...

CVE-2012-1913

creationtimestamp| type| source ---|---|--- 2010-02-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11560...

CVE-2009-1913

SQL injection vulnerability in manager.php in LuxBum 0.5.5, when magicquotesgpc is disabled and dotclear authentication is used, allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

CVE-2009-1913

SQL injection vulnerability in manager.php in LuxBum 0.5.5, when magicquotesgpc is disabled and dotclear authentication is used, allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

CVE-2009-1913

CVE-2009-1913 affects LuxBum 0.5.5. The vulnerability is a SQL injection in the login flow, specifically in manager.php, triggered when magic_quotes_gpc is disabled and dotclear authentication is used. An attacker can remotely execute arbitrary SQL commands by supplying a crafted username value i...

CVE-2009-1913

creationtimestamp| type| source ---|---|--- 2009-05-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8645...

CVE-2008-1913

CVE-2008-1913 affects Lasernet CMS (versions 1.5 and 1.11) with a vulnerable index.php. When magic_quotes_gpc is disabled, an attacker can inject arbitrary SQL via the new parameter in a new action, enabling remote execution and partial impact on confidentiality/integrity/availability. The NVD li...

CVE-2008-1913

creationtimestamp| type| source ---|---|--- 2008-04-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5454...

SuSE 10 Security Update : xorg-x11-server (ZYPP Patch Number 1913)

This security update fixes crashes in the PCF handling, which might be used to crash the Xserver using applications or even to execute code in them. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

CVE-2007-1913

The CVE-2007-1913 entry pertains to SAP RFC Library 6.40 and 7.00 before 20061211. It describes an information-disclosure vulnerability in the TRUSTED_SYSTEM_SECURITY function that could allow remote attackers to verify the existence of users and groups on systems and domains via unspecified vect...

CVE-2006-1913

Cross-site scripting XSS vulnerability in jaxguestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1913

CVE-2006-1913 describes a cross-site scripting (XSS) vulnerability in the PHP script jax_guestbook.php of Jax Guestbook versions 3.1, 3.31, and 3.50 . The issue arises because the attacker can inject arbitrary web script or HTML via the query parameter page . The vulnerability is exploitable remo...

CVE-2005-1913

CVE-2005-1913 affects the Linux kernel up to version 2.6.12.1. The vulnerability occurs when a non group-leader thread executes a different program while an itimer is pending; the expiry signal is delivered to the old group-leader task, which no longer exists, causing a kernel panic (local DoS). ...

Fedora Core 4 : kernel-2.6.12-1.1387_FC4 (2005-510)

Wed Jun 29 2005 Dave Jones - 2.6.12.2 - Mon Jun 27 2005 Dave Jones - Disable multipath caches. 161168 - Reenable AMD756 I2C driver for x86-64. 159609 - Add more IBM r40e BIOS's to the C2/C3 blacklist. - Thu Jun 23 2005 Dave Jones - Make orinoco driver suck less. Scanning/roaming/ethtool support...

CVE-2004-1913

The CVE-2004-1913 entry documents a cross-site scripting (XSS) vulnerability in the NukeCalendar 1.1.a module (as used in PHP-Nuke), exploitable via the eid parameter in modules.php. This allows remote attackers to inject arbitrary web script or HTML. The available references confirm the affected...

CVE-2004-1913

Cross-site scripting XSS vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to inject arbitrary web script or HTML via the eid parameter...

myPHPNuke phptonuke.php filnavn Parameter Traversal Arbitrary File Access

The version of myPHPNuke installed on the remote host allows anyone to read arbitrary files by passing the full filename to the 'filnavn' argument of the 'phptonuke.php' script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Status: it was not tested against a vulnerable host, and the...