[KIS-2014-12] TestLink <= 1.9.12 (database.class.php) Path Disclosure Weakness

---------------------------------------------------------------- TestLink = 1.9.12 database.class.php Path Disclosure Weakness ---------------------------------------------------------------- - Software Link: http://testlink.org/ - Affected Versions: Version 1.9.12 and prior versions. - Weakness...

CVE-2014-8082

lib/functions/database.class.php in TestLink before 1.9.13 allows remote attackers to obtain sensitive information via unspecified vectors, which reveals the installation path in an error message...

CVE-2014-8082

lib/functions/database.class.php in TestLink before 1.9.13 allows remote attackers to obtain sensitive information via unspecified vectors, which reveals the installation path in an error message...

CVE-2014-8082

The CVE-2014-8082 issue affects TestLink versions up to 1.9.12 (pre-1.9.13). The vulnerability is in lib/functions/database.class.php and stems from debug output (debug_print_backtrace) revealing the installation path in error messages, enabling information disclosure. Public advisories describe ...

TestLink 1.9.12 Multiple Vulnerabilities

TestLink versions 1.9.12 and below suffer from a path disclosure weakness and below suffer from a PHP object injection vulnerability in execSetResults.php ---------------------------------------------------------------- TestLink "; debugprintbacktrace; echo ""; 211. 212. else 213. 214. echo "";...

Internet Security Systems ICECap Manager 2.0.23 Default Username and Password

No description provided by source. source: http://www.securityfocus.com/bid/1216/info ICECap Manager is a management console for BlackICE IDS Agents and Sentries. By default, ICECap Manager listens on port 8081, transmits alert messages to another server on port 8082, and has an administrative...

QIP 2005 Malformed Rich Text Message Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33609/info QIP 2005 is prone to a remote denial-of-service vulnerability. Exploiting this issue may allow attackers to cause the application to hang and consume excessive computer resources, denying service to legitimate...

Oracle MySQL 5.6.x < 5.6.15 Remote Code Execution

Binary data 8082.prm...

Unrestricted file upload

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka...

CVE-2010-3964

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka...

CVE-2010-3964: Undefined Security Weakness

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka...

PT-2010-5199

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server 2007 SP2 Description The issue is related to an unrestricted file upload vulnerability in the Document Conversions Launcher Service. This allows remote attackers to execute arbitrary code via a crafted SOAP...

CVE-2009-0769

QIP 2005 build 8082 allows remote attackers to cause a denial of service CPU consumption and application hang via a crafted Rich Text Format RTF ICQ message, as demonstrated by an \rtf\pict&& message. NOTE: the vulnerability may be in Sergey Tkachenko TRichView. If so, then this should not be...

Design/Logic Flaw

QIP 2005 build 8082 allows remote attackers to cause a denial of service CPU consumption and application hang via a crafted Rich Text Format RTF ICQ message, as demonstrated by an \rtf\pict&& message. NOTE: the vulnerability may be in Sergey Tkachenko TRichView. If so, then this should not be...

QIP 2005 - Malformed Rich Text Message Remote Denial of Service

QIP 2005 - Malformed Rich Text Message Remote Denial of Service source: https://www.securityfocus.com/bid/33609/info QIP 2005 is prone to a remote denial-of-service vulnerability. Exploiting this issue may allow attackers to cause the application to hang and consume excessive computer resources,...

QIP 2005 - Malformed Rich Text Message Remote Denial of Service

source: https://www.securityfocus.com/bid/33609/info QIP 2005 is prone to a remote denial-of-service vulnerability. Exploiting this issue may allow attackers to cause the application to hang and consume excessive computer resources, denying service to legitimate users. NOTE: This issue may occur ...

CVE-2008-1357

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string...

CVE-2008-1357

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string...