Open-Xchange Security Advisory 2014-11-07

Product: OX App Suite Vendor: Open-Xchange GmbH Internal reference: 34765 Bug ID Vulnerability type: SQL Injection CWE-89 Vulnerable version: 7.6.0 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Researcher credits: SoftScheck GmbH Fixed...

CVE-2014-8954

creationtimestamp| type| source ---|---|--- 2014-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35198...

CVE-2014-7140

creationtimestamp| type| source ---|---|--- 2014-11-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35180...

CVE-2014-7177

creationtimestamp| type| source ---|---|--- 2014-10-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35099...

CVE-2014-2647

creationtimestamp| type| source ---|---|--- 2014-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35076...

CVE-2014-0995

creationtimestamp| type| source ---|---|--- 2014-10-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35000...

CVE-2014-100003

creationtimestamp| type| source ---|---|--- 2014-10-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34968...

CVE-2014-7280

creationtimestamp| type| source ---|---|--- 2014-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34929...

CVE-2014-5289

creationtimestamp| type| source ---|---|--- 2014-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34856 2024-03-18 08:41:55+00:00| seen| https://t.me/ctinow/210267...

CVE-2014-7221

creationtimestamp| type| source ---|---|--- 2014-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34857...

CVE-2014-8295

creationtimestamp| type| source ---|---|--- 2014-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34851...

CVE-2014-5308

creationtimestamp| type| source ---|---|--- 2014-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34863...

CVE-2014-7222

creationtimestamp| type| source ---|---|--- 2014-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34857...

coman.es XSS vulnerability

Vulnerable URL: http://www.coman.es/web/news.php?idbutton=0%27%27%3E%3Cimg%20src=x%20onerror=prompt%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 18:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

CVE-2014-7186

creationtimestamp| type| source ---|---|--- 2014-09-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36933...

CVE-2014-3671

creationtimestamp| type| source ---|---|--- 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34765 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34766 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34777 2014-10-01...

CVE-2014-6308

creationtimestamp| type| source ---|---|--- 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34763...

CVE-2014-7910

creationtimestamp| type| source ---|---|--- 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34765 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34766 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34777 2014-10-01...

CVE-2014-3659

creationtimestamp| type| source ---|---|--- 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34765 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34766 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34777 2014-10-01...

CVE-2014-62771

creationtimestamp| type| source ---|---|--- 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34777 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34765 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34766 2014-10-01...