Oracle Endeca Server - Remote Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Oracle Endeca Server Remote Command...

CVE-2013-3763

creationtimestamp| type| source ---|---|--- 2013-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27877 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/oracleendecaexec.rb 2025-02-06 03:13:41+00:00| seen...

CVE-2013-3763

The CVE-2013-3763 vector is a command-injection vulnerability in Oracle Endeca Server (Oracle Fusion Middleware) affecting 7.4.0 and 7.5.1.1 via the controlSoapBinding createDataStore method. Connected advisories (CPAIs) describe remote command execution with a flaw that can be exploited by sendi...

Oracle Endeca Server Remote Command Execution

This module exploits a command injection vulnerability on the Oracle Endeca Server 7.4.0. The vulnerability exists on the createDataStore method from the controlSoapBinding web service. The vulnerable method only exists on the 7.4.0 branch and isn't available on the 7.5.5.1 branch. In addition, t...

Gentoo Security Advisory GLSA 201211-01 (MantisBT)

The remote host is missing updates announced in advisory GLSA 201211-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2011-3763

CVE-2011-3763 affects OpenCart 1.4.9.3. A direct request to a .php file (e.g., system/startup.php) can reveal the installation path in an error message, leading to information disclosure. The identified impact is partial confidentiality loss; the CVSS score (NVD) is Base 5.0 (Medium) with network...

Fedora Update for mantis FEDORA-2010-19070

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-3763

Cross-site scripting XSS vulnerability in core/summaryapi.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the Summary field, a different vector than CVE-2010-3303...

CVE-2010-3763

Cross-site scripting XSS vulnerability in core/summaryapi.php in MantisBT before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the Summary field, a different vector than CVE-2010-3303...

CVE-2010-3763

CVE-2010-3763 is an XSS vulnerability in MantisBT’s core/summary_api.php that allows injection of arbitrary script/HTML via the Summary field in versions before 1.2.3. Impact aligns with a partial integrity exposure (I:P) per CVSS, with no confidentiality or availability impact. The issue is addr...

CVE-2009-3763

CVE-2009-3763 affects Oracle OpenSSO/OpenSSO Enterprise (Access Manager) 7.1, 7, 2005Q4, and 8.0. The vulnerability is exposed via HTTP and requires authentication; impact is listed as integrity with partial impact, over a network. The CVE is referenced in Oracle Sun Products Suite documentation ...

CVE-2008-4150

SQL injection vulnerability in picturecategory.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3763...

Sql injection

SQL injection vulnerability in picturecategory.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3763...

CVE-2008-3763

CVE-2008-3763 describes a variable overwrite vulnerability in libsecure.php of Turnkey PHP Live Helper 2.0.1 and earlier. When register_globals is enabled, remote attackers can overwrite arbitrary variables related to the db config file, potentially enabling code injection by overwriting the lang...

CVE-2008-3763

creationtimestamp| type| source ---|---|--- 2008-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6261...

Debian Security Advisory DSA 1358-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 1358-1. OpenVAS Vulnerability Test $Id: deb13581.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1358-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

openSUSE 10 Security Update : asterisk (asterisk-3977)

This update fixes multiple bugs in asterisk that allowed remote attackers to crash the asterisk server or even execute arbitrary code CVE-2007-3762, CVE-2007-3763, CVE-2007-3764. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

ASA-2007-015: Remote Crash Vulnerability in IAX2 channel driver

Asterisk Project Security Advisory - ASA-2007-015 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Remote Crash Vulnerability in IAX2 channel driver |...

CVE-2007-3763

CVE-2007-3763 is an issue in the Asterisk IAX2 channel driver (chan_iax2). The vulnerability is a NULL pointer dereference caused by processing crafted LAGRQ/LAGRP frames containing IAX information elements, which can crash the system and cause a denial of service. Affected products/versions (as ...

CVE-2006-3763

CVE-2006-3763 affects Diesel Joke Site, specifically category.php, where the id parameter is vulnerable to SQL injection. The vulnerability allows remote attackers to manipulate SQL commands, potentially compromising data integrity or confidentiality. The available descriptions consistently indic...