IBM Maximo Asset Management Information Disclosure Vulnerability (CNVD-2016-10463)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution. A security vulnerability exists in IBM Maximo Asset Management, which allows remote attackers to submit a special request to obtain sensitive information...

ManageEngine ServiceDesk Plus 9.2 Build 9207 Information Disclosure Vulnerability

Exploit for jsp platform in category web applications Title: ManageEngine ServiceDesk Plus Low Privileged User View All Tickets Date: 18 October 2016 Author: p0z Vendor: ManageEngine Vendor Homepage: https://www.manageengine.com/ Product: ServiceDesk Plus Version: 9.2 Build 9207 Other versions...

IBM Maximo Asset Management Information Disclosure Vulnerability (CNVD-2016-09860)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. An information disclosure vulnerability exists in IBM Maximo Asset Management, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Upload Vulnerability in Jinan Guozi Digital Technology Asset Management Information System

The functions of the asset management system cover all aspects of state-owned asset supervision and management business activities. The functions of the asset management system for grass-roots units include the management of applications and declarations, procurement and acceptance, daily changes...

Jinan Guozi Digital Technology Asset Management System fckeditor exists arbitrary file upload vulnerability

Asset management system of Jinan Guozi Digital Technology Co., Ltd. is a set of sharing and management platform for precision instruments or large instruments. Jinan Guozidian Digital Technology Asset Management System fckeditor has an arbitrary file upload vulnerability, which can be exploited b...

SQL Injection Vulnerability in Asset Management System sysbh Parameter of Jinan Guozi Digital Technology Co.

Asset management system of Jinan Guozi Digital Technology Co., Ltd. is a set of sharing and management platform for precision instruments or large instruments. The product suffers from SQL injection vulnerability, the vulnerability URL is: http://host/dxyqsyspt/sysList.aspx?sysbh=000001 The...

SQL Injection Vulnerability in Asset Management System sysbh Parameter of Jinan Guozi Digital Technology Co.

Asset management system of Jinan Guozi Digital Technology Co., Ltd. is a set of sharing and management platform for precision instruments or large instruments. The product suffers from SQL injection vulnerability, the vulnerability URL is: http://host/dxyqsyspt/sysDetail.aspx?sysbh=000001 The...

assetmanagement.gs.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-178336 Description| Value ---|--- Affected Website:| assetmanagement.gs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability (CNVD-2016-06551)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. A cross-site scripting vulnerability exists in IBM Maximo Asset Management versions 7.6, 7.5, and 7.1, which can be exploited by an attacker to execute arbitrary script code and steal...

Fotoware Fotoweb 'to' Parameter Cross-Site Scripting Vulnerability

Fotoware Fotoweb is an enterprise-level digital asset management system DMS from Fotoware Norway. A cross-site scripting vulnerability exists in Fotoware Fotoweb, which can be exploited by an attacker to execute arbitrary script code, steal cookie-based authentication and launch other attacks...

The vulnerability of the software system for managing enterprise assets in IBM Maximo Asset Management allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the software system for managing enterprise assets in IBM Maximo Asset Management exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially crafted U...

CVE-2016-0393

IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote attackers to obtain sensitive URL information by reading log files...

CVE-2016-0393

IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote attackers to obtain sensitive URL information by reading log files...

CVE-2016-0393

IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote attackers to obtain sensitive URL information by reading log files...

CVE-2016-0393

IBM Maximo Asset Management (core product) 7.6 and 7.5, including related Industry Solutions and IBM Control Desk products that are installed on affected cores, are vulnerable to information disclosure via log files exposing sensitive URL data (CVE-2016-0393). The issue affects 7.6 and 7.5 lines ...

IBM Maximo Asset Management Remote Information Disclosure Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution. A security vulnerability exists in IBM Maximo Asset Management, which allows remote attackers to exploit the vulnerability by submitting a special request to obtain sensitive information...

CVE-2016-0399

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-0399

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-0399

CVE-2016-0399 affects IBM Maximo Asset Management core (versions 7.6, 7.5, 7.1) and related IBM products when deployed on top of affected cores. The vulnerability is a cross-site scripting (XSS) flaw caused by improper validation of user-supplied input, allowing a remote authenticated attacker to...