Default credentials

Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATHINFO...

CVE-2019-14472

CVE-2019-14472 affects Zurmo 3.2.7-2, with a cross-site scripting (XSS) vulnerability exploitable through the PATH_INFO entry (app/index.php/zurmo/default). The root cause, as reflected in CNVD-2019-26160, Red Hat and CNVD entries, points to insufficient input/data validation that allows injectio...

CVE-2019-14472

Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATHINFO...

Atlassian Crowd Authentication Bypass Vulnerability

Atlassian Crowd is a Web-based single sign-on system from Atlassian Australia. The system provides authentication, authorization, and other functions for multiple users, web applications, and directory servers. A security vulnerability exists in Atlassian Crowd versions prior to 3.2.7 and version...

CVE-2019-7747

DbNinja 3.2.7 allows session fixation via the data.php sessid parameter...

Cross site scripting

includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if users/admin/tasks.php exists...

Session fixation

DbNinja 3.2.7 allows session fixation via the data.php sessid parameter...

CVE-2019-7748

CVE-2019-7748 affects DbNinja 3.2.7 where the file _includes\online.php can be abused to trigger cross-site scripting through the data.php task parameter when _users/admin/tasks.php exists. This is a reflected/XSS-style issue tied to the handling of the data parameter, as described in the NVD ent...

CVE-2019-7545

In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting XSS vulnerability in the User Name field...

CVE-2019-7545

In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting XSS vulnerability in the User Name field...

CVE-2019-7545

CVE-2019-7545 details (consolidated): In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting (XSS) vulnerability in the User Name field, attributable to a stored XSS flaw. The Red Hat/NVD/NIST records and related feeds confirm this CVE across multiple ...

PT-2018-17486 · Facebook · Osquery

Name of the Vulnerable Software and Affected Versions: osquery versions prior to 3.2.7 Description: A maliciously crafted Universal/fat binary can evade third-party code signing checks in osquery, allowing unsigned code to execute. This occurs because the full inspection of the Universal/fat bina...

Moodle 3.x SSRF Vulnerability (Jan 2018) - Linux

Moodle is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Moodle 3.x Bypass Vulnerability (Jan 2018) - Windows

Setting for blocked hosts list can be bypassed with multiple A record hostnames. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Moodle 3.x XSS Vulnerability (Jan 2018) - Windows

Moodle is prone to cross-site scripting XSS in calendar event name. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle...

[ASA-201804-9] xfig: information disclosure

Arch Linux Security Advisory ASA-201804-9 ========================================= Severity: Medium Date : 2018-04-19 CVE-ID : CVE-2017-16899 Package : xfig Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-513 Summary ======= The package xfig before version...

CVE-2018-6584

SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request...

Sql injection

SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request...

CVE-2018-6584

SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request...

Joomla! Component DT Register 3.2.7 - 'id' SQL Injection

Exploit Title: Joomla! Component DT Register 3.2.7 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://www.dthdevelopment.com/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/dt-register/ Version: 3.2.7 Category: Webapps Tested on:...