CVE-2012-5943

CVE-2012-5943 affects IBM iNotes 8.5.x prior to 8.5.3 FP4. The vulnerability is a Cross-site Scripting (XSS) flaw that allows user-assisted remote attackers to inject arbitrary web script or HTML via mail-related vectors (SPR JDOE8ZZS9). The description provides the affected product and the attac...

CVE-2013-0525

CVE-2013-0525 concerns multiple XSS vulnerabilities in IBM iNotes 8.5.x that allow local users to inject arbitrary web script or HTML via a shared mail file (SPR DKEN8PDNTX). Affected product: IBM iNotes 8.5.x. Root cause: cross-site scripting in the web UI via shared mail files. Impact as stated...

CVE-2012-5938

The issue (CVE-2012-5938) affects IBM InfoSphere Information Server versions 8.1, 8.5, 8.7 and 9.1 on UNIX/Linux. During installation, files are created with insufficient permissions/ownership, allowing local users to bypass access restrictions via standard filesystem operations. The IBM Security...

CVE-2012-4844

CVE-2012-4844 is an XSS vulnerability in the IBM Lotus Domino web server (8.5.x up to 8.5.3). Remote attackers could inject arbitrary web script/HTML via unspecified vectors. The issue affects Domino 8.5.x, with IBM reportedly addressing related vulnerabilities in Domino 9.0 (XSS and related comp...

Inmatrix Ltd. Zoom Player 8.5 - '.jpeg'File Memory Corruption / Arbitrary Code Execution

Exploit Title: Inmatrix Ltd. Zoom Player Crafted JPEG File Memory Corruption and Arbitrary Code Execution Exploit. Version: Zoom Player v8.5 Date: 09-1-2013 Author: Debasish Mandal. Blog : http://www.debasish.in/ Software Link: http://www.inmatrix.com/files/zoomplayerdownload.shtml Vendor Homepag...

Inmatrix Ltd. Zoom Player 8.5 - .jpegFile Memory Corruption Arbitrary Code Execution

Inmatrix Ltd. Zoom Player 8.5 - .jpegFile Memory Corruption Arbitrary Code Execution Exploit Title: Inmatrix Ltd. Zoom Player Crafted JPEG File Memory Corruption and Arbitrary Code Execution Exploit. Version: Zoom Player v8.5 Date: 09-1-2013 Author: Debasish Mandal. Blog : http://www.debasish.in/...

Fedora Update for bind FEDORA-2012-19822

Check for the Version of bind OpenVAS Vulnerability Test Fedora Update for bind FEDORA-2012-19822 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CVE-2012-4846

CVE-2012-4846 is corroborated by OpenVAS entries describing IBM Lotus Notes Web Application XSS vulnerabilities across Linux, Windows, and Mac OS X. The OpenVAS tests (IDs 803216, 803215, 1361412562310803218, 1361412562310803215, 1361412562310803218) associate the CVE with an XSS issue in the Lot...

Axway Secure Transport 5.1 SP2 Path Traversal Vulnerability

Exploit for windows platform in category web applications Secure Transport Path Traversal Vulnerability Public Disclosure Date: November 11, 2012 Vendors Affected: Axway http://www.axway.com Systems Affected: Secure Transport Problem: A path traversal vulnerability was identified in SecureTranspo...

SysAid Helpdesk 8.5 Pro SQL Injection Vulnerability

SysAid Helpdesk version 8.5 Pro suffers from multiple remote blind SQL injection vulnerabilities. ======= Summary ======= Name: SysAid Helpdesk Pro - Blind SQL Injection Release Date: 30 November 2012 Reference: NGS00241 Discoverer: Daniel Compton Vendor: SysAid Vendor Reference: Systems Affected...

CVE-2010-5251

The CVE-2010-5251 entry concerns IBM Lotus Notes 8.5 with privilege escalation via untrusted search paths. A local user can gain privileges through Trojan horse DLLs (nnoteswc.dll or nlsxbe.dll) placed in the current working directory, demonstrated by a directory containing a .vcf, .vcs, or .ics ...

Design/Logic Flaw

IBM WebSphere Application Server WAS 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before 8.5.0.1, when the PM44303 fix is installed, does not properly validate credentials, which allows remote authenticated users to obtain administrative access via...

Endonesia 8.5 CMS Publisher Module SQL Injection

. \ || \ \ \ / \ /\ \ |/ \ | / \ | | / | Y Y / \ | \ \ /|| |||| / /| / / / / / Exploit Title: Endonesia 8.5 CMS Publiher Module Sql Injection Vulnerability Google Dork: Intext:"Powered by Endonesia 8.5" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ download Link :...

CVE-2012-3301

Multiple CRLF injection vulnerabilities in the HTTP server in IBM Lotus Domino 8.5.x before 8.5.4 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input involving 1 Mozilla Firefox 3.0.9 and earlier or 2 unspecified browsers...

eNdonesia - 'cid' SQL Injection

source: https://www.securityfocus.com/bid/54741/info eNdonesia is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, ...

eNdonesia - cid SQL Injection

eNdonesia - cid SQL Injection source: https://www.securityfocus.com/bid/54741/info eNdonesia is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

eNdonesia 8.5 diskusi Module SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: eNdonesia 8.5 diskusi Module SQL Injection Vulnerability Google Dork: intext:powered by endonesia 8.5 Date: 07/28/2012 Author: Crim3R download Link :...

eNdonesia 8.5 SQL Injection

Exploit Title: eNdonesia 8.5 diskusi Module SQL Injection Vulnerability Google Dork: intext:powered by endonesia 8.5 Date: 07/27/2012 Author: Crim3R download Link : http://nchc.dl.sourceforge.net/project/endonesia/eNdonesia/eNdonesia.8.5/endonesia.8.5.zip Version: 8.5 Tested on: win 7...

eNdonesia Katalog 8.5 Cross Site Scripting

Exploit Title: eNdonesia katalog Module Cross Site Scripting Google Dork: inurl:mod.php?mod=katalog&op= Date: 07/28/2012 Author: Crim3R download Link : http://nchc.dl.sourceforge.net/project/endonesia/eNdonesia/eNdonesia.8.5/endonesia.8.5.zip Version: 8.5 Tested on: all ===============Vuln...

eNdonesia 8.5 katalog Module Cross Site Scripting

Exploit for php platform in category web applications Exploit Title: eNdonesia 8.5 katalog Module Cross Site Scripting Google Dork: inurl:mod.php?mod=katalog&op=search Date: 07/28/2012 Author: Crim3R download Link :...