33554 matches found
CVE-2014-8939
creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:35+00:00| seen| https://t.me/cibsecurity/12476...
CVE-2014-8941
creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:34+00:00| seen| https://t.me/cibsecurity/12474...
CVE-2014-8942
creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:33+00:00| seen| https://t.me/cibsecurity/12473...
CVE-2014-8943
creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:32+00:00| seen| https://t.me/cibsecurity/12472...
CVE-2014-8944
creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:31+00:00| seen| https://t.me/cibsecurity/12471...
CVE-2014-8945
creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:29+00:00| seen| https://t.me/cibsecurity/12470...
CVE-2014-9702
creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:28+00:00| seen| https://t.me/cibsecurity/12469...
CVE-2014-8942
Lexiglot through 2014-11-20 allows CSRF...
CVE-2014-9702
system/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity malfunctions, allows remote attackers to obtain sensitive information username and password via any request, such as a password reset request...
CVE-2014-8944
Lexiglot through 2014-11-20 allows XSS Reflected via the username, or XSS Stored via the admin.php?page=config installname, intromessage, or newfilecontent parameter...
CVE-2014-8945
admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...
CVE-2014-8939
Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information full path via an include/smarty/plugins/modifier.dateformat.php request if PHP has a non-recommended configuration that produces warning messages...
Design/Logic Flaw
Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information names and details of projects by visiting the /update.log URI...
Command injection
admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...
Directory traversal
FarLinX X25 Gateway through 2014-09-25 allows directory traversal via the log-handling feature...
Cross site request forgery (csrf)
Lexiglot through 2014-11-20 allows CSRF...
CVE-2014-9702
CVE-2014-9702 affects the Cmfive PHP ERP framework (specifically system/classes/DbPDO.php) up to 2015-03-15. The root cause is a vulnerability when database connectivity malfunctions, allowing remote attackers to disclose sensitive credentials (username and password) via any request, including pa...
CVE-2014-9702
system/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity malfunctions, allows remote attackers to obtain sensitive information username and password via any request, such as a password reset request...
CVE-2014-7173
The CVE-2014-7173 case affects FarLinX X25 Gateway (through 2014-09-25). The vulnerability is a OS command-injection issue via shell metacharacters in several scripts: sysSaveMonitorData.php, fsx25MonProxy.php, syseditdate.php, iframeupload.php, and sysRestoreX25Cplt.php. Root cause and impact ar...