217 matches found
ManageEngine ADManager Plus < Build 7201 TFA Bypass
Zoho ManageEngine ADManager Plus before version 7.2 Build 7201 is affected by a two factor authentication bypass vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...
Microsoft Windows Active Directory Domain Name Service Elevation of Privilege Vulnerability
Microsoft Windows Active Directory is a centralized directory management service from Microsoft Corporation USA that is responsible for architecting large network environments. Microsoft Windows Active Directory has a domain name service elevation of privilege vulnerability, which stems from...
CVE-2022-2265
The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25...
Path traversal
The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25...
CVE-2022-2265 Path traversal in Identity and Directory Management System
The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25...
CVE-2022-2265
CVE-2022-2265 affects the Identity and Directory Management System from Çekino Bilgi Teknolojileri prior to version 2.1.25, which contains an unauthenticated path traversal vulnerability. The issue is fixed in version 2.1.25. According to NVD, CVSS 3.1 base score is 7.5 (HIGH) with AV:N/AC:L/PR:N...
PT-2022-15597
Name of the Vulnerable Software and Affected Versions Identity and Directory Management System versions prior to 2.1.25 Description The issue is related to an unauthenticated Path traversal vulnerability in the Identity and Directory Management System. This vulnerability has been fixed in version...
Directory Management System 路径遍历漏洞
Directory Management System is a directory management system by the individual developer Anuj Kumar. A path traversal vulnerability exists in Directory Management System versions prior to 2.1.25, which stems from an unauthenticated path traversal vulnerability...
LDAP Account Manager 跨站脚本漏洞
LDAP Account Manager is a web front-end for managing entries e.g., users, groups, DHCP settings stored in the LDAP directory. cross-site scripting vulnerability exists in LDAP Account Manager LAM versions prior to 8.0, which stems from the fact that if the PHP OpenSSL extension is not installed o...
The vulnerability of the search-dirctory.php component of the Directory Management System allows a hacker to execute arbitrary SQL commands.
The vulnerability of the search-dirctory.php component of the Directory Management System is related to the ability to inject commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using the searchdata parameter...
The vulnerability of the view-directory.php component of the Directory Management System allows a hacker to execute arbitrary SQL commands.
The vulnerability of the view-directory.php component of the Directory Management System relates to the ability to inject commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using the editid parameter...
The vulnerability of the add-directory.php component of the Directory Management System allows a hacker to execute arbitrary SQL commands.
The vulnerability of the add-directory.php component of the Directory Management System relates to the ability to execute commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely, using the fullname parameter...
Directory Management System SQL Injection Vulnerability
Directory Management System is a directory management system. A SQL injection vulnerability exists in Directory Management System v1.0, which stems from a lack of validation of the fullname parameter in add-directory.php against an externally-entered SQL statement. An attacker can exploit this...
Directory Management System SQL Injection Vulnerability (CNVD-2022-58312)
Directory Management System is a directory management system by Anuj Kumar, a personal developer. A security vulnerability exists in Directory Management System v1.0, which can be exploited to perform an SQL injection attack via the editid parameter in view-directory.php...
Directory Management System SQL Injection Vulnerability (CNVD-2022-58311)
Directory Management System is a directory management system by Anuj Kumar, a personal developer. A security vulnerability exists in Directory Management System v1.0, which can be exploited by an attacker to perform a SQL injection attack via the searchdata parameter in search-dirctory.php...
CVE-2022-31383
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php...
CVE-2022-31384
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php...
CVE-2022-31382
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php...
