CVE-2014-6923

The CVE-2014-6923 entries concern the Dubrovnik Guided Walking Tours Android app (com.mytoursapp.android.app351) version 1.3.2. Affected component: network security logic where the app does not verify X.509 certificates from SSL servers. Root cause: missing/incorrect certificate validation allows...

Seagate BlackArmor NAS sg2000-2000.1331 - Multiple Persistent Cross Site Scripting Vulnerabilities

No description provided by source. Exploit Title: Seagate BlackArmor NAS - Multiple Persistent Cross Site Scripting Vulnerabilities Google Dork: N/A Date: 04-01-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.seagate.com/ http://www.seagate.com/ Software Link:...

CVE-2013-6923

The CVE-2013-6923 issue affects Seagate BlackArmor NAS sg2000-2000 with firmware sg2000-2000.1331. It describes two persistent XSS risks: (1) fullname input in admin/access_control_user_edit.php and (2) workname input in admin/network_workgroup_domain.php. The root cause is failure to sanitize us...

Seagate BlackArmor NAS sg2000-2000.1331 Cross Site Scripting

Exploit Title: Seagate BlackArmor NAS - Multiple Persistent Cross Site Scripting Vulnerabilities Google Dork: N/A Date: 04-01-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.seagate.com/ Software Link: http://www.seagate.com/support/downloads/item/banas-220-firmware-master-dl...

Seagate BlackArmor NAS sg2000-2000.1331跨站脚本漏洞

No description provided by source. Exploit Title: Seagate BlackArmor NAS - Multiple Persistent Cross Site Scripting Vulnerabilities Google Dork: N/A Date: 04-01-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.seagate.com/ http://www.seagate.com/ Software Link:...

Seagate BlackArmor NAS sg2000-2000.1331 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Exploit Title: Seagate BlackArmor NAS - Multiple Persistent Cross Site Scripting Vulnerabilities Google Dork: N/A Date: 04-01-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.seagate.com/ Software Link: http://www.seagate.com/support/downloads/item/banas-220-firmware-master-dl...

CVE-2008-6923

SQL injection vulnerability in the content component comcontent 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a blogcategory action to index.php...

CVE-2008-6923

CVE-2008-6923 describes an SQL injection in Joomla! (com_content 1.0.0) where the Itemid parameter in a blogcategory action to index.php allows remote attackers to execute arbitrary SQL commands. The vulnerability affects the content component and can lead to data exposure or modification as impl...

CVE-2008-6923

creationtimestamp| type| source ---|---|--- 2008-07-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6025...

CVE-2006-6923

CVE-2006-6923 describes a SQL injection in the newsletters/edition.php script of Bitweaver, affecting version 1.3.1 and earlier. The underlying issue allows an attacker to inject and execute arbitrary SQL via the tk parameter, leading to potential data disclosure or modification. The connected re...