Lucene search
+L

29 matches found

NVD
NVD
•added 2014/04/15 10:55 a.m.•26 views

CVE-2014-0357

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...

5CVSS6.4AI score0.01833EPSS
SaveExploits2References3
Prion
Prion
•added 2014/04/15 10:55 a.m.•27 views

Design/Logic Flaw

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...

5CVSS7AI score0.01833EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2014/04/15 10:00 a.m.•43 views

CVE-2014-0357

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...

6.4AI score0.01833EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/04/15 12:00 a.m.•5 views

CVE-2014-0357: Improper Authentication

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...

5CVSS6AI score0.01833EPSS
SaveExploits2References2
Prion
Prion
•added 2011/11/02 9:55 p.m.•20 views

Sql injection

SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...

7.5CVSS9.1AI score0.01023EPSS
SaveExploits2References5Affected Software1
Positive Technologies
Positive Technologies
•added 2011/11/02 12:00 a.m.•8 views

PT-2011-1943

Name of the Vulnerable Software and Affected Versions BrightSuite Groupware version 5.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is exploited via the ContactID parameter in the "pages/contact list mail form.asp" page. Recommendations F...

7.5CVSS0.01023EPSS
SaveExploits2References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/11/02 12:00 a.m.•3 views

CVE-2010-5008: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...

7.5CVSS6.4AI score0.01023EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2008/06/09 12:00 a.m.•19 views

Telephone Directory 2008 - Arbitrary Delete Contact

Telephone Directory 2008 - Arbitrary Delete Contact !/usr/bin/perl -w Telephone Directory 2008 see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & hak3r-b0y All muslims HaCkeRs : Special Thnx To : Simo64 L3azzzzzz khouya...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/06/09 12:00 a.m.•39 views

Telephone Directory 2008 - Arbitrary Delete Contact

!/usr/bin/perl -w Telephone Directory 2008 see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & hak3r-b0y All muslims HaCkeRs : Special Thnx To : Simo64 L3azzzzzz khouya ---------------------------------------------------------------------------- TITLE: PerlSploit Class REQUIREMENTS: PHP 4 /...

5CVSS5.8AI score0.0162EPSS
SaveExploits1
Rows per page
Query Builder