PT-2023-16806 · Ecshop · Ecshop

Name of the Vulnerable Software and Affected Versions: ECshop versions up to 4.1.8 Description: A problematic issue has been found in the Backup Database Handler component of the file admin/database.php, leading to unrestricted upload. The attack can be launched remotely. The issue affects some...

SUSE CVE-2018-16947

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller butc process accepts incoming RPCs but does not require or allow for authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, includin...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 6

Package name: xms10.14.0.10628.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10521.bin, xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin. Date: May 2022 Languages supported: English US Important notes about this...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 4

Package name: xms10.14.0.10424.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin Date: January 2022 Languages supported: English US Important notes about this update As a best practice, Citrix...

Citrix Endpoint Management (aka XenMobile Server) 10.12.0 Rolling Patch 11

Package name: xms10.12.0.11103.bin For: XenMobile Server 10.12.0 Deployment type: On-premises only Replaces: xms10.12.0.11004.bin, xms10.12.0.10917.bin, xms10.12.0.10818.bin, xms10.12.0.10714.bin, xms10.12.0.10613.bin, xms10.12.0.10539.bin, xms10.12.0.10417.bin, xms10.12.0.10324.bin,...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 2

Package name: xms10.14.0.10206.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10118.bin Date: December 2021 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this and other updates to...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 1

Package name:xms10.14.0.10118.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces:None Date: November 2021 Languages supported:English US Important notes about this update As a best practice, Citrix recommends that you install this and other updates to ensure that you hav...

Remote code execution

MyWebSQL 3.7 has a remote code execution RCE vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's archive file...

CVE-2019-7731

MyWebSQL 3.7 has a remote code execution RCE vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's archive file...

CVE-2019-7731

MyWebSQL 3.7 has a remote code execution RCE vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's archive file...

CVE-2019-7731

Concrete details found: CVE-2019-7731 affects MyWebSQL 3.7 with a remote code execution vulnerability. The root cause described across sources is that an attacker can write shell code into the database and trigger the Backup Database function using a .php filename for the archive, enabling RCE. C...

CVE-2019-6691

phpwind 9.0.2.170426 UTF8 allows SQL Injection via the admin.php?m=backup&c=backup&a=doback tabledb parameter, related to the "--backup database" option...

OpenAFS has an unspecified vulnerability

OpenAFS is a distributed file system that allows sharing of archives and resources between systems over LANs and WANs. A security vulnerability exists in OpenAFS versions prior to 1.6.23 and 1.8.x prior to 1.8.2, which stems from the backup tape controller process not requiring authentication for...

UBUNTU-CVE-2018-16947

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller butc process accepts incoming RPCs but does not require or allow for authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, includin...

CVE-2018-16947

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller butc process accepts incoming RPCs but does not require or allow for authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, includin...

Authentication flaw

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller butc process accepts incoming RPCs but does not require or allow for authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, includin...

DEBIAN-CVE-2018-16947

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller butc process accepts incoming RPCs but does not require or allow for authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, includin...

Advance Loan Management System 2.4.2 Database Disclosure

========================================================================================================================================== | Title : Advance Loan Management System Version 2.4.2 database Disclosure Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : Win ...

IBM Sterling B2B Integrator Standard Edition SQL Injection Vulnerability

IBM Sterling B2B Integrator Standard Edition is the standard edition of a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A SQL injection...

Unauthorized Access Vulnerability in Goodview Video Conferencing System

GoodVision video conferencing system, supports mobile phone/tablet/PC HD video conferencing. An unauthorized access vulnerability exists in the GoodVision video conferencing system. An unlogged-in attacker can exploit the vulnerability to backup or download system database files...