Sharetronix 3.3 Cross Site Request Forgery / SQL Injection

Advisory ID: HTB23214 Product: Sharetronix Vendor: Blogtronix, LLC Vulnerable Versions: 3.3 and probably prior Tested Version: 3.3 Advisory Publication: May 7, 2014 without technical details Vendor Notification: May 7, 2014 Vendor Patch: May 27, 2014 Public Disclosure: May 28, 2014 Vulnerability...

CVE-2014-3415

SQL injection vulnerability in Sharetronix before 3.4 allows remote authenticated users to execute arbitrary SQL commands via the inviteusers parameter to the /invite page for a group...

CVE-2014-3415

Affected software : Sharetronix (v3.3 and probably prior). Vulnerability : SQL Injection (CWE-89) via the invite_users[] parameter on the /[group]/invite page. Input is not properly sanitized before being used in a SQL query, enabling a remote authenticated user to execute arbitrary SQL commands ...

Sharetronix 3.3 - Multiple Vulnerabilities

Advisory ID: HTB23214 Product: Sharetronix Vendor: Blogtronix, LLC Vulnerable Versions: 3.3 and probably prior Tested Version: 3.3 Advisory Publication: May 7, 2014 without technical details Vendor Notification: May 7, 2014 Vendor Patch: May 27, 2014 Public Disclosure: May 28, 2014 Vulnerability...

Sharetronix 3.3 - Multiple Vulnerabilities

Sharetronix 3.3 - Multiple Vulnerabilities Advisory ID: HTB23214 Product: Sharetronix Vendor: Blogtronix, LLC Vulnerable Versions: 3.3 and probably prior Tested Version: 3.3 Advisory Publication: May 7, 2014 without technical details Vendor Notification: May 7, 2014 Vendor Patch: May 27, 2014...

CVE-2012-3415

...

CVE-2012-3415

CVE-2012-3415 is rejected/not used; reference CVE-2012-2401 as the active entry.

CVE-2013-3415

Cisco ASA Software (8.4.x before 8.4(3) and 8.6.x before 8.6(1.3)) is vulnerable to a denial-of-service caused by improper memory management when an AnyConnect SSL VPN client disconnects. The issue allows remote attackers to trigger memory consumption, forwarding outage, or system hang by sending...

Microsoft .Net Form Authentication Insecure Redirect (MS11-100; CVE-2011-3415)

A spoofing vulnerability has been reported in Microsoft .NET Framework. The vulnerability is due to an error in the way .NET Framework verifies return URLs during the forms authentication process. A remote attacker may exploit this vulnerability by enticing users to open a malicious link...

Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)

This host is missing a critical security update according to Microsoft Bulletin MS11-100. OpenVAS Vulnerability Test $Id: secpodms11-100.nasl 5362 2017-02-20 12:46:39Z cfi $ Vulnerabilities in .NET Framework Could Allow Elevation of Privilege 2638420 Authors: Sooraj KS Copyright: Copyright c 2011...

Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)

This host is missing a critical security update according to Microsoft Bulletin MS11-100. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS11-100: Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)

The remote Windows host is running a version of the Microsoft ASP.NET Framework that has multiple vulnerabilities. These include: - A flaw exists in the way ASP.NET generates hash tables for user-supplied values. By sending a small number of specially crafted posts to an ASP.NET server, an attack...

Google Chrome < 6.0.472.59 Multiple Vulnerabilities (Sep 2010) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-3415

CVE-2010-3415 affects Google Chrome versions before 6.0.472.59; the flaw is in Geolocation handling that could cause memory corruption and a denial of service (or other unspecified impact) via unknown vectors. The connected documents also reference overlapping use-after-free Geolocation issues in...

Fedora Update for sudo FEDORA-2010-3415

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-3415

Concrete details available: CVE-2009-3415 is listed in Oracle CPU January 2010 as affecting Oracle OLAP within Oracle Database 9.2.0.8/9.2.0.8DV, 10.1.0.5 and 10.2.0.3. The vulnerability is mapped to Oracle OLAP with remote impact pathway requiring an authenticated session (Remote Exploit without...

Fedora Update for midori FEDORA-2008-3415

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-3415

CVE-2008-3415 affects CMScout 2.05 (and related listings reference CMScout 2.06). The vulnerability is a directory traversal in common.php when .htaccess is not supported, allowing remote attackers to include and execute arbitrary local files through crafted directory traversal sequences in the b...

CVE-2008-3415

creationtimestamp| type| source ---|---|--- 2008-07-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6142...

Debian: Security Advisory (DSA-925-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...