PT-2015-2518

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.0.6 through 12.2.4 Description The issue is related to the Oracle Application Object Library component and affects data integrity. It may be related to Single Signon and potentially allows remote attackers t...

CVE-2015-4854: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Single Signon. NOTE: the previous information is from the October 2015 CPU. Oracle...

Wing FTP Server Admin /admin_loglist.html Cross-Site Scripting Vulnerability

WingFTPServer is a professional cross-platform FTP server , it has good speed , reliability and a friendly configuration interface . Wing FTP Server Admin /adminloglist.html domain parameter handling has a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerabilit...

Social Engineering Email Sender – SEES

SEES – Social Engineering Email Sender Most of the companies nowadays have their firewalls, threat monitoring and prevention security appliances setup. With these mechanisms in place, security precautions are taken and incidents are monitored. Inbound traffic being restricted, SEES on the other...

CVE-2014-8351

SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty aka CNIL CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter...

Sql injection

SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty aka CNIL CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter...

CVE-2014-8351

SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty aka CNIL CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter...

CVE-2014-8351

SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty aka CNIL CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter...

PT-2014-8483

Name of the Vulnerable Software and Affected Versions CookieViz versions prior to 1.0.1 Description A SQL injection issue allows remote web servers to execute arbitrary SQL commands via the domain parameter in the info.php file. Recommendations For versions prior to 1.0.1, update to version 1.0.1...

CVE-2014-8351: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in info.php in French National Commission on Informatics and Liberty aka CNIL CookieViz before 1.0.1 allows remote web servers to execute arbitrary SQL commands via the domain parameter...

PT-2013-5314

Name of the Vulnerable Software and Affected Versions Sophos Web Appliance versions prior to 3.7.9.1 Sophos Web Appliance versions 3.8 prior to 3.8.1.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to...

CVE-2013-4983: Improper Neutralization of Special Elements used in an OS Command

The getreferers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to end-user/index.php...

PT-2012-5904

Name of the Vulnerable Software and Affected Versions JBMC Software DirectAdmin version 1.403 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the domain parameter in CMD DOMAIN. Recommendations For version...

CVE-2012-5305: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in CMDDOMAIN in JBMC Software DirectAdmin 1.403 allows remote attackers to inject arbitrary web script or HTML via the domain parameter...

PT-2012-2170

Name of the Vulnerable Software and Affected Versions Whois Search plugin version 1.4.2.3 Description The issue is a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the domain parameter to "index.php" when the WHOIS widget is enabled...

PT-2012-2171

Name of the Vulnerable Software and Affected Versions Whois Search plugin versions prior to 1.4.2.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the domain parameter in the vendors/samswhois/samswhois.inc.php file. This enables...

CVE-2011-5193: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin 1.4.2.3 for WordPress, when the WHOIS widget is enabled, allows remote attackers to inject arbitrary web script or HTML via the domain parameter to index.php, a different vulnerability than...

CVE-2011-5194: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin before 1.4.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the domain parameter, a different vulnerability than CVE-2011-5193...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or authenticated users to inject arbitrary web script or HTML via the 1 ipaddress or 2 domain parameter to setup-network.php, different vectors than CVE-2011-5149. NOTE: the provenance ...

CVE-2012-1787

Multiple cross-site scripting XSS vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 FILE, or 3 DOMAIN parameters...