67 matches found
CVE-2014-7124
CVE-2014-7124 affects the Android app IP Alarm (com.cosesy.gadget.alarm) version 1.4. The vulnerability stems from the app not verifying X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof the server and access sensitive information via a crafted certi...
Progea Movicon Client Detection via UDP
Binary data 7124.pasl...
Fedora Update for postgresql-pgpoolAdmin FEDORA-2012-7124
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2008-7124
zKup CMS 2.0 through 2.3 does not require administrative authentication for admin/configuration/modifier.php, which allows remote attackers to gain administrator privileges via a direct request, as demonstrated by adding a new administrator...
CVE-2008-7124
zKup CMS versions 2.0–2.3 expose a direct-requests flaw: admin/configuration/modifier.php does not require administrative authentication, enabling remote attackers to gain administrator privileges by adding a new admin. Impact is described as privilege escalation to admin; exploitation details ar...
CVE-2008-7124
creationtimestamp| type| source ---|---|--- 2008-03-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5219 2008-03-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5220...
CVE-2006-7124
CVE-2006-7124 describes a PHP remote file inclusion in BSQ Sitestats (Joomla) 1.8.0 and possibly earlier versions prior to 2.2.1. The flaw, triggered by the baseDir parameter in external/rssfeeds.php, allows an attacker to execute arbitrary PHP code on the affected server. Impact is noted as part...