CVE-2011-4531

Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted content in a 1 gettargetocxparam or 2 sendtargetocxparam command...

CVE-2011-4532

Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager ALM 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method...

CVE-2011-4532

CVE-2011-4532 concerns Siemens ALM: the ALMListView.ALMListCtrl ActiveX control (almaxcx.dll) in ALM GUI versions 2.0–5.1+SP1+Upd2 allows remote overwrite of arbitrary files via the Save method due to an absolute path traversal. The issue is tied to the ActiveX control used in the Siemens Automat...

CVE-2011-4531

Siemens ALM (Automation License Manager) versions 4.0–5.1+SP1+Upd1 are affected by a vulnerability where ALM does not validate content in certain commands (get_target_ocx_param, send_target_ocx_param), leading to a NULL pointer dereference and denial of service. Root cause: improper handling of f...

CVE-2011-4529

Siemens Automation License Manager (ALM) versions 4.0–5.1+SP1+Upd1 contain buffer-overflow vulnerabilities in the _licensekey command’s handling of the serialid field (via check_licensekey/read_licensekey), allowing remote code execution. Exploitation is remotely feasible over TCP (port 4410) wit...

CVE-2011-4530

Siemens ALM (Automation License Manager) 4.0–5.1+SP1+Upd1 is affected by a vulnerability in how it handles fields coming from clients over the network. The issue arises from improper handling of field lengths in commands sent to the server (notably open_session->workstation->NAME and grant-...

CVE-2011-4532: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager ALM 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method...

CVE-2011-4834

The CVE-2011-4834 issue affects HP Application Lifecycle Management (ALM) 11 on AIX, HP-UX, and Solaris, specifically the GetInstalledPackages function in the configuration tool. It enables local privilege escalation via two attack vectors: (1) a Trojan horse placed in /tmp/tmp.txt as a FIFO, and...

CVE-2011-4834: Undefined Security Weakness

The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management ALM 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via 1 a Trojan horse /tmp/tmp.txt FIFO or 2 a symlink attack on /tmp/tmp.txt...

PT-2011-1228

Name of the Vulnerable Software and Affected Versions HP Application Lifestyle Management ALM 11 Description The issue is related to the GetInstalledPackages function in the configuration tool, which lacks proper privilege control and access management mechanisms. This can allow an attacker to ga...

0A29-11-2 : Privilege escalation vulnerability in HP Application Lifestyle Management (ALM) Platform v11

================ Privilege escalation vulnerability in HP Application Lifestyle Management ALM Platform v11 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ The HP Application Lifestyle Management...

HP Application Lifestyle Management Platform 11 Code Execution

================ Privilege escalation vulnerability in HP Application Lifestyle Management ALM Platform v11 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ The HP Application Lifestyle Management...

Siemens Automation License Manager Vulnerabilities

Overview This Advisory is a follow-up to the original Alert titled “ICS-ALERT-11-332-01A—Siemens Automation License Manager Vulnerabilities” that was published December 02, 2011, on the ICS-CERT web page. ICS-CERT is aware of publicly disclosed reports of four vulnerabilities in Siemens Automatio...

Sql injection

SQL injection vulnerability in read.php in Advanced Links Management ALM 1.5.2 allows remote attackers to execute arbitrary SQL commands via the catId parameter...

CVE-2008-2529

CVE-2008-2529 concerns SQL injection in Advanced Links Management (ALM) 1.5.2, exploitable through the read.php endpoint’s catId parameter. The underlying flaw allows remote attackers to inject arbitrary SQL commands via catId, potentially compromising data integrity and confidentiality. The NVD ...

CVE-2008-2529: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in read.php in Advanced Links Management ALM 1.5.2 allows remote attackers to execute arbitrary SQL commands via the catId parameter...

alm-sql.txt

ALM - Advanced Links Management remote SQL injection exploit Script download : http://www.easy-script.com/scripts-dl/almv152.zip Founder: His0k4 ALGERIAN HACKER Greetz : All friends & muslims HaCkErS... Contact: His0k4.hlmatgmail.com P.O.C : ---------------------...

Advanced Links Management (ALM) 1.52 SQL Injection Vulnerability

No description provided by source. ALM - Advanced Links Management remote SQL injection exploit Script download : http://www.easy-script.com/scripts-dl/almv152.zip Founder: His0k4 ALGERIAN HACKER Greetz : All friends & muslims HaCkErS... Contact: His0k4.hlmatgmail.com P.O.C : --------------------...

Advanced Links Management (ALM) 1.52 - SQL Injection

ALM - Advanced Links Management remote SQL injection exploit Script download : http://www.easy-script.com/scripts-dl/almv152.zip Founder: His0k4 ALGERIAN HACKER Greetz : All friends & muslims HaCkErS... Contact: His0k4.hlmatgmail.com P.O.C : ---------------------...

Advanced Links Management (ALM) 1.52 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Advanced Links Management ALM 1.52 SQL Injection Vulnerability ================================================================ ALM - Advanced Links Management remote SQL...