CVE-2026-79572

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

PT-2026-87110

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

CVE-2026-79572

The Distribution Management v1.0.0 software contains an XML External Entity (XXE) vulnerability within its level-rule module . Attackers can exploit this flaw by supplying a crafted XML payload to perform unauthorized actions, such as reading sensitive files , scanning internal networks , or laun...

CVE-2026-79572

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

CVE-2026-79572

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

CVE-2026-79572: Improper Restriction of XML External Entity Reference

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

EUVD-2026-72910

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

JVN#74280258: MilkyStep fails to restrict access permissions

MilkyStep provided by Igreks Inc. is a CGI for e-mail newsletter distribution management. MilkyStep fails to restrict access permissions CWE-264. Impact A remote attacker may alter product settings. Solution Update the Software Update to the latest version according to the information provided by...

A domain name is a virtual host distribution management system 0day-vulnerability warning-the black bar safety net

google search: inurl:help/notice. asp? nid= Placed directly into the injection tool is injected directly can wait until the DBOWNER Background setinmanager...

A domain name is a virtual host distribution management system 0day-vulnerability warning-the black bar safety net

google search: inurl:help/notice. asp? nid= Placed directly into the injection tool is injected directly can wait until the DBOWNER Background setinmanager Table name segment does not tell you! You guys are hackers you know. Nerve haha...

CVE-2011-1915

SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-1915

CVE-2011-1915 impacts Enspire eClient (7.3.2.3) within Enspire Distribution Management Solution (7.3.2.7). A SQL injection vulnerability allows remote execution of arbitrary SQL via unspecified vectors, with potential authentication bypass per CERT notes. NVD lists base metrics (AV:N/AC:L/Au:N/C:...

CVE-2011-1915

SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-1915: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...