Lucene search
+L

29 matches found

NVD
NVD
•added 2014/04/15 10:55 a.m.•28 views

CVE-2014-0357

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...

5CVSS6.4AI score0.01833EPSS
SaveExploits2References3
Prion
Prion
•added 2014/04/15 10:55 a.m.•29 views

Design/Logic Flaw

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...

5CVSS7AI score0.01833EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2014/04/15 10:00 a.m.•45 views

CVE-2014-0357

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...

6.4AI score0.01833EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/04/15 12:00 a.m.•6 views

CVE-2014-0357: Improper Authentication

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...

5CVSS6AI score0.01833EPSS
SaveExploits2References2
Prion
Prion
•added 2011/11/02 9:55 p.m.•20 views

Sql injection

SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...

7.5CVSS9.1AI score0.01023EPSS
SaveExploits2References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/11/02 12:00 a.m.•6 views

CVE-2010-5008: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pages/contactlistmailform.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter...

7.5CVSS6.4AI score0.01023EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2011/11/02 12:00 a.m.•9 views

PT-2011-1943

Name of the Vulnerable Software and Affected Versions BrightSuite Groupware version 5.4 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is exploited via the ContactID parameter in the "pages/contact list mail form.asp" page. Recommendations F...

7.5CVSS0.01023EPSS
SaveExploits2References7
exploitpack
exploitpack
•added 2008/06/09 12:00 a.m.•19 views

Telephone Directory 2008 - Arbitrary Delete Contact

Telephone Directory 2008 - Arbitrary Delete Contact !/usr/bin/perl -w Telephone Directory 2008 see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & hak3r-b0y All muslims HaCkeRs : Special Thnx To : Simo64 L3azzzzzz khouya...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/06/09 12:00 a.m.•39 views

Telephone Directory 2008 - Arbitrary Delete Contact

!/usr/bin/perl -w Telephone Directory 2008 see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & hak3r-b0y All muslims HaCkeRs : Special Thnx To : Simo64 L3azzzzzz khouya ---------------------------------------------------------------------------- TITLE: PerlSploit Class REQUIREMENTS: PHP 4 /...

5CVSS5.8AI score0.0162EPSS
SaveExploits1
Rows per page
Query Builder