72 matches found
PT-2017-2829 · Orientdb · Orientdb
Name of the Vulnerable Software and Affected Versions: OrientDB versions prior to 2.2.22 Description: The issue is related to insufficient access control in certain functions, specifically where, fetchplan, and order by. This allows remote attackers to execute arbitrary OS commands via a crafted...
LeaseWeb: Server version is disclosure in http://leasewebnoc.com/
Hello Leaseweb It's my same report but it's for different web application http://leasewebnoc.com here is sever version disclosure in http://leasewebnoc.com as when I have request about .htaccess , that returns result of forbidden but following server version publicly disclosure. Apache/2.2.22...
LeaseWeb: PHP and Web Server version disclosed on leasewebnoc.com
HI Version disclosure is happening on leasewebnoc.com GET /en/contact HTTP/1.1 Host: leasewebnoc.com User-Agent: Mozilla/5.0 Windows NT 6.3; WOW64; rv:44.0 Gecko/20100101 Firefox/44.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5...
WordPress MailChimp Subscribe Forms 1.1 Remote Code Execution Vulnerability
WordPress MailChimp Subscribe Forms plugin version 1.1 suffers from a remote code execution vulnerability. Exploit Title: Wordpress MailChimp Subscribe Forms Remote Code Execution Date: 21-04-2015 Exploit Author: woodspeed Vendor Homepage: https://wordpress.org/plugins/mailchimp-subscribe-sm/...
Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-headers-2.2.22 package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...
Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-source-2.2.22 package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...
Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-image-2.2.22-nautilus package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...
Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information
The kernel-image-2.2.22-generic package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local...
The vulnerability of the Red Hat Linux operating system, which allows a malicious individual to compromise the accessibility of protected information
The vulnerability of the kernel-BOOT-2.2.22 package of the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited locally...
The vulnerability of the Red Hat Linux operating system, which allows a malicious individual to compromise the accessibility of protected information
The vulnerability of the kernel-ibcs-2.2.22 package of the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited locally...
The vulnerability of the Red Hat Linux operating system, which allows a malicious individual to compromise the accessibility of protected information
The vulnerability of the kernel-smp-2.2.22 package of the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. Exploiting this vulnerability can be carried out locally...
The vulnerability of the Red Hat Linux operating system, which allows a malicious individual to compromise the accessibility of protected information
The vulnerability of the kernel-utils-2.2.22 package of the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited locally...
The vulnerability of the Red Hat Linux operating system, which allows a malicious individual to compromise the accessibility of protected information
The vulnerability of the kernel 2.2.22 of the Red Hat Linux operating system; its exploitation may lead to a violation of the accessibility of protected information. The vulnerability can be exploited locally...
The vulnerability of the Red Hat Linux operating system, which allows a malicious individual to compromise the accessibility of protected information
The vulnerability of the kernel-enterprise-2.2.22 package of the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of this vulnerability can be carried out locally...
The vulnerability of the Red Hat Linux operating system, which allows a malicious individual to compromise the accessibility of protected information
The vulnerability of the kernel-headers-2.2.22 package of the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited locally...
The vulnerability of the Red Hat Linux operating system, which allows a malicious individual to compromise the accessibility of protected information
The vulnerability of the kernel-source-2.2.22 package of the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited locally...
ZeroCMS 1.0 - (zero_transact_article.php article_id POST parameter) SQL Injection Vulnerability
No description provided by source. ZeroCMS v1.0 SQL Injection Vulnerability zerotransactarticle.php articleid POST parameter Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms Affected version: 1.0 Severity: High CWE: 89 - http://cwe.mitre.org/data/definitions/89.html CVE:...
ZeroCMS 1.0 SQL Injection
ZeroCMS v1.0 SQL Injection Vulnerability zerotransactarticle.php articleid POST parameter Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms Affected version: 1.0 Severity: High CWE: 89 - http://cwe.mitre.org/data/definitions/89.html CVE: CVE-2014-4194 Date: 20/06/2014...
GDL 4.2 - Multiple Vulnerabilities
Title : GDL 4.2 Multiple Vulnerabilities - Down. Script : http://kmrg.itb.ac.id/ - http://kmrg.itb.ac.id/gdl42.zip - Author : ByEge - Home : http://byege.blogspot.com.tr/ - Tested : Apache/2.2.22 Win32 PHP/5.4.3 - Date : 26/02/2014 - Google Dork : "Powered by GDL 4.2" And "gdl.php?mod=browse" -...
Apache HTTP Server suEXEC符号链接任意文件访问漏洞
Apache HTTP Server是一款开源的WEB服务程序 Apache HTTP Server包含的suEXEC会不安全创建临时文件，允许攻击者利用漏洞通过符号链接针对.htaccess文件进行攻击，可用于访问任意文件 0 Apache HTTP Server 2.2.22 厂商解决方案 Apache ----------- 目前没有详细解决方案提供： http://httpd.apache.org/...