38 matches found
CVE-2019-6579
Siemens Spectrum Power 4 with Web Office Portal is affected by CVE-2019-6579 (Improper Neutralization of Special Elements Used in a Command). An unauthenticated attacker with network access to the web server on port 80/443 can execute system commands with administrative privileges, potentially co...
ICSA-19-099-02 Siemens Spectrum Power 4.7
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: Spectrum Power 4.7 Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability in versions of Spectrum Power 4 using the user-specific...
CVE-2018-6579
SQL Injection exists in the JEXTN Reverse Auction 3.1.0 component for Joomla! via a view=products&uid= request...
CVE-2018-6579
SQL Injection exists in the JEXTN Reverse Auction 3.1.0 component for Joomla! via a view=products&uid= request...
CVE-2018-6579
The CVE-2018-6579 issue affects the Joomla! JEXTN Reverse Auction 3.1.0 component, where a SQL injection vulnerability can be triggered via a request pattern using view=products&uid= (as described across multiple sources). The underlying problem is untrusted input being interpolated into SQL quer...
CVE-2016-6579
CVE-2016-6579 entry is rejected/not used and does not represent an active vulnerability.
CVE-2014-6579
CVE-2014-6579 affects Oracle PeopleSoft Enterprise PeopleTools (versions 8.52 and 8.53) in the Integration Broker area. The vulnerability is described as an unspecified issue that allows remote authenticated users to disclose data (confidentiality) via unknown vectors. The available connected doc...
DEBIAN-CVE-2012-6579
Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to configure encryption or signing for certain outbound e-mail, and possibly cause a denial of service loss of e-mail readability, via an e-mail message to a queue's address...
CVE-2012-6579
Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to configure encryption or signing for certain outbound e-mail, and possibly cause a denial of service loss of e-mail readability, via an e-mail message to a queue's address...
CVE-2012-6579
The CVE-2012-6579 entry concerns Best Practical Solutions RT affected versions: RT 3.8.x before 3.8.15 and RT 4.0.x before 4.0.8, where enabling GnuPG allows remote attackers to configure encryption or signing for outbound e‑mail by sending a message to a queue address, potentially causing a deni...
Pushdo Botnet Detection
Binary data 6579.prm...
CVE-2008-6579
The vulnerability CVE-2008-6579 affects Nortel Communication Server 1000 4.50.x. It allows remote attackers to obtain the web application structure via unknown vectors related to web resources accessible to phones and administrators. No concrete exploit details, impact, affected components beyond...
Sql injection
Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 locationid parameter to locationdel.php and 2 vlanid parameter to vlanedit.php. NOTE: the vlanview.php and vlandel.php vectors are already covered by CVE-2007-6579...
CVE-2007-6579
Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vlanid parameter to 1 vlanview.php, 2 vlanedit.php, and 3 vlandel.php; the 4 assetclassgroupid parameter to assetclassgroupview.php; the 5 subnetid parameter to nodelist.php; and...
CVE-2007-6579
CVE-2007-6579 covers multiple SQL injection vulnerabilities in Ip Reg 0.3 (and later 0.4) that let remote attackers run arbitrary SQL commands via parameters such as vlan_id (to vlanview.php, vlanedit.php, vlandel.php), assetclassgroup_id (to assetclassgroupview.php), and subnet_id (to nodelist.p...
CVE-2006-6579
Microsoft Windows XP has weak permissions FILEWRITEDATA and FILEREADDATA for Everyone for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAMmachine and read access by IUSRMachine...