PT-2012-4380

Name of the Vulnerable Software and Affected Versions Travelon Express version 6.2.2 Description The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension using specific API endpoints, such as "airline-edit.php", "hotel-image-add.php", ...

CVE-2012-2939: Undefined Security Weakness

Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using 1 airline-edit.php, 2 hotel-image-add.php, or 3 hotel-add.php...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5239)

This kernel update fixes the following security problems : - tunneled ipv6 packets SIT could trigger a memory leak in the kernel. Remote attackers could exploit that to crash machines. CVE-2008-2136 Additionally the following bugfixes have been included for all platforms : -...

Travelon Express CMS 6.2.2 XSS / Shell Upload / SQL Injection

Title: ====== Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities Date: ===== 2012-05-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=530 VL-ID: ===== 530 Common Vulnerability Scoring System: ==================================== 8.1 Introduction: =============...

Travelon Express CMS 6.2.2 - Multiple Vulnerabilities

Title: ====== Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities Date: ===== 2012-05-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=530 VL-ID: ===== 530 Common Vulnerability Scoring System: ==================================== 8.1 Introduction: =============...

Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities

Document Title: =============== Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=530 Release Date: ============= 2012-05-10 Vulnerability Laboratory ID VL-ID: ====================================...

Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities Introduction: ============= Travelon Xpress 6.2.2 is an exclusive product created for all travel agencies across the globe. The script is coded in PHP/ MySQL and is highl...

Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities

Document Title: =============== Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=530 Release Date: ============= 2012-05-10 Vulnerability Laboratory ID VL-ID: ====================================...

Design/Logic Flaw

Unspecified vulnerability in the Application Express component in Oracle Database Server 4.0 and 4.1 allows remote attackers to affect integrity via unknown vectors...

CVE-2012-1708

Unspecified vulnerability in the Application Express component in Oracle Database Server 4.0 and 4.1 allows remote attackers to affect integrity via unknown vectors...

CVE-2012-1708: Undefined Security Weakness

Unspecified vulnerability in the Application Express component in Oracle Database Server 4.0 and 4.1 allows remote attackers to affect integrity via unknown vectors...

Code injection

Cisco Unified Contact Center Express aka CCX 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834...

CVE-2011-2583

Cisco Unified Contact Center Express aka CCX 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834...

PT-2012-1564

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express aka CCX versions 8.0 through 8.5 Description The issue allows remote attackers to cause a denial of service via network traffic. Recommendations For versions 8.0 through 8.5, update to a version that contai...

CVE-2011-2583: Improper Input Validation

Cisco Unified Contact Center Express aka CCX 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834...

Failover or Surebackup Starts a Virtual Machine With an Incorrect Ethernet Interface

Article Applicability The issue discussed in this article is strictly related to the use of VMXNET3 network adapters with the following vSphere VM guest operating systems: Windows 7 Windows 7 SP1 Server 2008 R2 Server 2008 R2 SP1 Challenge When you back up/replicate/copy/clone a vSphere VM runnin...

Oracle Database Multiple Vulnerabilities (April 2012 CPU)

The remote Oracle database server is missing the April 2012 Critical Patch Update CPU and is, therefore, potentially affected by security issues in the following components : - Core RDBMS - Oracle Spatial - OCI - Enterprise Manager Base Platform - Application Express %NASLMINLEVEL 70300 C Tenable...

Tivoli Provisioning Manager Express ActiveX RunAndUploadFile vulnerability

Added: 04/13/2012 CVE: CVE-2012-0198 BID: 52252 OSVDB: 79735 Background Tivoli Provisioning Manager Express for Software Distribution is a software inventory and distribution solution. Problem A buffer overflow vulnerability in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control...

Tivoli Provisioning Manager Express ActiveX RunAndUploadFile vulnerability

Added: 04/13/2012 CVE: CVE-2012-0198 BID: 52252 OSVDB: 79735 Background Tivoli Provisioning Manager Express for Software Distribution is a software inventory and distribution solution. Problem A buffer overflow vulnerability in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control...

Tivoli Provisioning Manager Express ActiveX RunAndUploadFile vulnerability

Added: 04/13/2012 CVE: CVE-2012-0198 BID: 52252 OSVDB: 79735 Background Tivoli Provisioning Manager Express for Software Distribution is a software inventory and distribution solution. Problem A buffer overflow vulnerability in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control...