DbDat - Db Database Assessment Tool

DbDat performs numerous checks on a database to evaluate security. The categories of checks performed are configuration, privileges, users, and information. Checks are performed by running queries or reading database configuration files. The goal of this tool is to highlight issues that need...

Database Assessment Tool: DbDat

DbDat performs numerous checks on a database to evaluate security. The categories of checks performed are configuration, privileges, users, and information. Checks are performed by running queries or reading database configuration files. The goal of this tool is to highlight issues that need...

CIS Manager CMS 2015Q4 SQL Injection Vulnerability

CIS Manager Content Management System 2015Q4 suffers from a remote SQL injection vulnerability. Document Title: =============== CIS Manager Content Management System 2015Q4 - SQL Injection Vulnerability Product & Service Introduction: =============================== The Constructive Internet...

CIS Manager CMS 2015Q4 SQL Injection

Document Title: =============== CIS Manager Content Management System 2015Q4 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1652 Release Date: ============= 2015-11-25 Vulnerability Laboratory ID VL-ID:...

CIS Manager CMS 2015Q4 - SQL Injection Vulnerability

Document Title: =============== CIS Manager CMS 2015Q4 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1652 Release Date: ============= 2015-11-25 Vulnerability Laboratory ID VL-ID: ==================================== 1652...

CIS Manager CMS 2015Q4 - SQL Injection Vulnerability

Document Title: =============== CIS Manager CMS 2015Q4 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1652 Release Date: ============= 2015-11-25 Vulnerability Laboratory ID VL-ID: ==================================== 1652...

CIS WebServer 3.5.13 Remote Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12662/info A vulnerability has been identified in the handling of certain types of requests by CIS WebServer. Because of this, it is possible for an attacker to gain access to potentially sensitive system files. The probl...

CIS Manager CMS - SQL Injection

No description provided by source. + Sql Injection on CIS Manager CMS + Date: 01/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.construtiva.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: default.asp + Dork :...

Construtiva CIS Manager CMS POST SQLi

TL;DR; ====== . PRODUCT : Construtiva CIS Manager . TYPE : SQLi http://site/autenticar/lembrarlogin.asp POST email . CVE : CVE-2014-3749 Software Description ==================== . The CIS Manager platform is a complete and powerful tool to manage sites and corporative portals on the Internet. Th...

CIS Manager 'email' Parameter SQL Injection Vulnerability

CIS Manager is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3749

SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar/lembrarlogin.asp...

Sql injection

SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar/lembrarlogin.asp...

CVE-2014-3749

SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar/lembrarlogin.asp...

CVE-2014-3749

CVE-2014-3749 affects Construtiva CIS Manager. The vulnerability is an SQL injection in the POST parameter email to autenticar/lembrarlogin.asp, allowing remote attackers to infer/modify data by sending crafted input. Documented as error-based SQL injection with the email field, consistent with t...

CVE-2014-3749: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar/lembrarlogin.asp...

Construtiva CIS Manager SQL Injection

Construtiva CIS Manager CMS POST SQLi TL;DR; ====== . PRODUCT : Construtiva CIS Manager . TYPE : SQLi http://site/autenticar/lembrarlogin.asp POST email . CVE : CVE-2014-3749 Software Description ==================== . The CIS Manager platform is a complete and powerful tool to manage sites and...

CIS Manager - 'email' SQL Injection

source: https://www.securityfocus.com/bid/67442/info CIS Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the application, access or modify dat...

CIS Manager - email SQL Injection

CIS Manager - email SQL Injection source: https://www.securityfocus.com/bid/67442/info CIS Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the...

CIS Manager CMS /default.asp SQL注入漏洞

No description provided by source...

CIS Manager 'TroncoID' Parameter SQL Injection Vulnerability

CIS Manager is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...