Radius Manager Cross Site Scripting

Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Radius Manager Multiple Cross Site Scripting Issues CVE-2010-4275 INTRODUCTION Radius Manager is a centralized way for administration of Mikrotik, Cisco, Chillispot and StarOS routers and...

Fedora Update for gnucash FEDORA-2010-16762

Check for the Version of gnucash OpenVAS Vulnerability Test Fedora Update for gnucash FEDORA-2010-16762 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Front Accounting 2.3RC2 Multiple Persistent XSS Vulnerabilities

Exploit for php platform in category web applications =============================================================== Front Accounting 2.3RC2 Multiple Persistent XSS Vulnerabilities =============================================================== Affected Applications: Front Accounting v2.3RC2;...

Front Accounting 2.3RC2 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications ============================================================== Front Accounting 2.3RC2 Multiple SQL Injection Vulnerabilities ============================================================== Affected Applications: Front Accounting v2.3RC2; other...

Front Accounting 2.3RC2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Front Accounting 2.3RC2 - Multiple Persistent Cross-Site Scripting Vulnerabilities Advisory Name: Multiple Persistent Cross-Site Scripting XSS in Front Accounting Internal Cybsec Advisory Id: 2010-1001-Multiple Persistent XSSs in Front Accounting Vulnerability Class: Permanent Cross-Site Scriptin...

Front Accounting 2.3RC2 - Multiple SQL Injections

Front Accounting 2.3RC2 - Multiple SQL Injections Advisory Name: Multiple SQL Injections in Front Accounting Internal Cybsec Advisory Id: 2010-1003-Multiple SQL Injections in Front Accounting Vulnerability Class: SQL Injection Affected Applications: Front Accounting v2.3RC2; other versions may al...

Front Accounting 2.3RC2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Advisory Name: Multiple Persistent Cross-Site Scripting XSS in Front Accounting Internal Cybsec Advisory Id: 2010-1001-Multiple Persistent XSSs in Front Accounting Vulnerability Class: Permanent Cross-Site Scripting XSS Release Date: 10/29/2010 Affected Applications: Front Accounting v2.3RC2; oth...

Front Accounting 2.3RC2 - Multiple SQL Injections

Advisory Name: Multiple SQL Injections in Front Accounting Internal Cybsec Advisory Id: 2010-1003-Multiple SQL Injections in Front Accounting Vulnerability Class: SQL Injection Affected Applications: Front Accounting v2.3RC2; other versions may also be affected. Affected Platforms: Any running...

Fedora Update for gnucash FEDORA-2010-16622

Check for the Version of gnucash OpenVAS Vulnerability Test Fedora Update for gnucash FEDORA-2010-16622 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 14 Update: gnucash-2.3.15-2.fc14

GnuCash is a personal finance manager. A check-book like register GUI allows you to enter and track bank accounts, stocks, income and even currency trades. The interface is designed to be simple and easy to use, but is backed with double-entry accounting principles to ensure balanced books...

[SECURITY] Fedora 13 Update: gnucash-2.3.15-2.fc13

GnuCash is a personal finance manager. A check-book like register GUI allows you to enter and track bank accounts, stocks, income and even currency trades. The interface is designed to be simple and easy to use, but is backed with double-entry accounting principles to ensure balanced books...

[SECURITY] Fedora 12 Update: gnucash-2.2.9-5.fc12

GnuCash is a personal finance manager. A check-book like register GUI allows you to enter and track bank accounts, stocks, income and even currency trades. The interface is designed to be simple and easy to use, but is backed with double-entry accounting principles to ensure balanced books...

Brilliant Accounting System (59) Insecure Library Loading Vulnerability

A vulnerability has been discovered in Brilliant Accounting System 59, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • idapi32.dll •...

Accounting Pro 2003 Insecure Library Loading Vulnerability

A vulnerability has been discovered in Accounting Pro 2003, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list loaded is as follows: • idapi32.dll • idr20009.dll •...

webERP 3.11.4 - Multiple Vulnerabilities

Title: webERP Multiple Vulnerabilities Author: ADEO Security Published: 30/06/2010 Version: 3.11.4 Possible all versions Vendor: http://www.weberp.org Description: "webERP is a complete web based accounting/ERP system that requires only a web-browser and pdf reader to use. It has a wide range of...

NolaPro Enterprise 4.0.5538 Cross Site Scripting / SQL Injection

Advisory : CORELAN-10-035 Disclosure date : May 1st, 2010 http://www.corelan.be:8800/advisories.php?id=CORELAN-10-035 00 : Vulnerability information Product : NolaPro Enterprise Version : 4.0.5538 Vendor : Noguska LLC URL : http://www.nolapro.com Platform : Windows PHP/MySQL Type of vulnerabiliti...

Joomla! Component webERPcustomer - Local File Inclusion

Joomla! Component webERPcustomer - Local File Inclusion --------------------------------------------------------------------------------- Joomla Component webERPcustomer Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s...

SQL-Ledger 'admin.pl' Empty Credentials

The remote web server is hosting SQL-Ledger, a web-based double-entry accounting system. The installed version does not require credentials to access the administrator interface. Note that the installed version is potentially affected by several other vulnerabilities, though Nessus has not tested...

FreeRADIUS Illegal Attributes Denial of Service (CVE-2004-0938)

The RADIUS protocol is used for the authentication, authorization and accounting of various network services. RADIUS is most often used by operating systems and hardware devices that provide network access to remote users. There is a large number of RADIUS implementations available, both commerci...

GNU Radius SQL Accounting Format String (CVE-2006-4181)

GNU Radius is a suite of applications which perform user authentication and accounting using the Remote Authentication Dial In User Service RADIUS protocol. The RADIUS protocol is specifically designed for authentication, authorization and accounting of various network services. RADIUS is most...