506 matches found
Sql injection
An issue was discovered in the Web Management Console in IPBRICK OS 6.3. There are multiple SQL injections...
Cross site request forgery (csrf)
An issue was discovered in the administrator interface in IPBRICK OS 6.3. The application doesn't check for Anti-CSRF tokens, allowing the submission of multiple forms unwillingly by a victim...
CVE-2018-16137
CVE-2018-16137 affects IPBRICK OS 6.3 Web Management Console. Connected sources describe multiple SQL injections in the Web Management Console, arising from a database-based application that lacks validation of externally supplied SQL statements, enabling an attacker to execute arbitrary SQL comm...
CVE-2018-16137
An issue was discovered in the Web Management Console in IPBRICK OS 6.3. There are multiple SQL injections...
IPBRICK OS SQL Injection Vulnerability
IPBRICK OS is a Linux-based communication platform. The platform includes features such as document and process management, e-mail and collaboration tools. A SQL injection vulnerability exists in the Web Management Console in IPBRICK OS version 6.3. The vulnerability stems from a database-based...
Directory traversal
An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977...
CVE-2019-5888
Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977...
CVE-2019-5891
An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an authenticated user, and login to the web application...
CVE-2019-5889
CVE-2019-5889 concerns a log-management directory traversal vulnerability in OverIT Geocall, affecting version 6.3 prior to build 2:346977. The root cause is a failure to properly filter path elements in the log-management component, enabling access to locations outside of a restricted directory....
CVE-2019-5888
OverIT Geocall 6.3 is affected by multiple Cross‑Site Scripting (XSS) vulnerabilities in builds prior to 2:346977. The issue stems from insufficient validation of client‑side data in the WEB application, enabling potential execution of arbitrary script in the context of a user’s browser. Remediat...
CVE-2019-5888
Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977...
CVE-2018-19726
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...
CVE-2018-19727
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...
MySQL User-Defined (Linux) (x86) - 'sys_exec' Local Privilege Escalation
Exploit Title: MySQL User-Defined Linux x32 / x8664 sysexec function local privilege escalation exploit Date: 24/01/2019 Exploit Author: d7x Vendor Homepage: https://www.mysql.com Software Link: www.mysql.com Version: MySQL 4.x/5.x Tested on: Debian GNU/Linux 8.11 / mysql Ver 14.14 Distrib 5.5.60...
Seopanel 3.13.0 Cross Site Scripting
Multiple Reflected Cross-site Scripting Vulnerabilities in Seopanel 3.13.0 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting Vulnerabilities in Seopanel Affected Software: Seopanel Affected Versions: 3.13.0 Homepage: https://www.seopanel.in Vulnerability...
INVT Electric VT-Designer
1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: INVT Electric Equipment: VT-Designer Vulnerabilities: Deserialization of Untrusted Data, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause...
Philips iSite and IntelliSpace PACS
1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Low skill level to exploit Vendor: Philips Equipment: iSite and IntelliSpace PACS Vulnerability: Weak Password Requirements 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker with local network access to impact...
Cross site scripting
Cross-site scripting XSS vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote attackers to inject arbitrary web script or HTML vi...
CVE-2018-7427
Cross-site scripting XSS vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote attackers to inject arbitrary web script or HTML vi...