94 matches found
EMC SourceOne产品ASP.NET应用跟踪信息泄露漏洞
Bugtraq ID: 47862 CVE ID：CVE-2011-1424 EMC SourceOne Email Management是一款电子邮件管理和监控软件。 启用了ASP.NET应用跟踪的EMC SourceOne Email Management存在安全漏洞，此跟踪文件包含应用程序的敏感信息，远程验证用户可调用ASP.NET应用跟踪从此文件中获得敏感信息。 EMC SourceOne Email Management for Notes/Domino 6.6.0.1209 HF1 EMC SourceOne Email Management for Notes/Domino...
[SECURITY] Fedora 14 Update: mailman-2.1.13-7.fc14
Mailman is software to help manage email discussion lists, much like Majordomo and Smartmail. Unlike most similar products, Mailman gives each mailing list a webpage, and allows users to subscribe, unsubscribe, etc. over the Web. Even the list manager can administer his or her list entirely from...
China CERT: We Missed Report On SCADA Hole
China’s Computer Emergency Response Team CERT admitted that it missed a September e-mail message from a researcher at NSS Labs that pointed out a critical vulnerability in a commonly used SCADA Supervisory Control And Data Acquisition software package. The lapse resulted in a gap of almost four...
Kayako eSupport v3.70.02 SQL injection Vulnerability
Exploit for php platform in category web applications ==================================================== Kayako eSupport v3.70.02 SQL injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...
Kayako eSupport 3.70.02 - SQL Injection
Name :Kayako eSupport v3.70.02 SQL Injection Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.kayako.com/solutions/esupport/ google dork:Help Desk Software by Kayako SupportSuite v3.70.02 Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...
Esoftpro Online Contact Manager - Multiple Vulnerabilities
Esoftpro Online Contact Manager - Multiple Vulnerabilities Exploit Title: Esoftpro Online Contact Manager Multiple Vulnerability Vendor url:http://www.esoftpro.com/ Version:3 Author: L0rd CrusAd3r aka VSN [email protected] Published: 2010-07-4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYu...
Microsoft Outlook Web Access Cross-Site Scripting (MS05-029; CVE-2005-0563)
Microsoft Outlook Web Access OWA is a component of Microsoft Exchange Server. OWA allows authorized users to send and receive email, manage a calendar, and perform other functions using a web browser. OWA utilizes HTML, CSS and scripting techniques to present the user interface through the web...
MailMachine Pro 2.2.4 Remote SQL Injection Vulnerability
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...
MailMachine Pro 2.2.4 - SQL Injection
MailMachine Pro 2.2.4 - SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
Design/Logic Flaw
WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to 1 the Recommend feature, Email Article 2 senders and 3 recipients, 4 New User Approval, 5 Edit Profiles, 6 the Newsletter Subscription form, 7 the Recommend form, and 8 sending of articles, which has...
Moderate: Red Hat Security Advisory: pine security update
A vulnerability in Pine version 4.44 and earlier releases can cause Pine to crash when sent a carefully crafted email. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 Pine, developed at the University of Washington, is a tool for reading, sending, and managing electronic...
MDaemon SMTP/POP/IMAP server DoS
Product: MDaemon SMTP/POP/IMAP server Authors: Alt-N Technologies Ltd www.mdaemon.com Vulnerable versions: v.6.0.7 and bellow Vulnerability: buffer overflow Bug&exploit by D4rkGr3y www.dhgroup.org Overview-------------------------------------------------------------- From MDaemon's help file:...
Netauth: Web Based Email Management System
This is just a quick note of a simple hole in the Netauth system. What is Netauth? Netauth is a web based eMail management system for Windows NT and most Unix platforms. What is the hole? The nethauth.cgi file http://server/cgi-bin/netauth.cgi?cmd=show&page=../../../../../../../../.. /etc/passwd...
