EUVD-2017-3088

Malware in sbrugna...

EUVD-2017-3089

Malware in sbrugna...

EUVD-2017-3090

Malware in sbrugna...

IDERA Uptime Monitor SQL Injection Vulnerability

IDERA Uptime Monitor is a cross-platform server monitoring software from IDERA. The software provides a server performance, availability and other indicators to collect, summarize and generate reports and other functions. An SQL injection vulnerability exists in the...

IDERA Uptime Monitor Path Traversal Vulnerability

IDERA Uptime Monitor is a cross-platform server monitoring software from IDERA. The software provides a server performance, availability and other indicators to collect, summarize and generate reports and other functions. A directory traversal vulnerability exists in the get2post.php file in IDER...

CVE-2017-11469

get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the filename parameter...

CVE-2017-11470

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter...

Directory traversal

get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the filename parameter...

Sql injection

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter...

Sql injection

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter...

CVE-2017-11470

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter...

CVE-2017-11469

get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the filename parameter...

CVE-2017-11471

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter...

CVE-2017-11470

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter...

CVE-2017-11469

CVE-2017-11469 affects IDERA Uptime Monitor 7.8. get2post.php’s file_name parameter allows directory traversal, enabling reading arbitrary host files. This is a confirmed path traversal vulnerability, with the CNVD/NVD entries describing read access. No patch/versioned remediation is provided in ...

CVE-2017-11469

get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the filename parameter...

CVE-2017-11471

IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter...

PT-2017-12037

Name of the Vulnerable Software and Affected Versions IDERA Uptime Monitor version 7.8 Description The issue concerns SQL injection in the /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php endpoint via the element parameter. Recommendations For IDERA Uptime Monitor version 7.8,...

PT-2017-12038

Name of the Vulnerable Software and Affected Versions IDERA Uptime Monitor version 7.8 Description The issue concerns SQL injection in the /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php endpoint via the element parameter. Recommendations For IDERA Uptime Monitor version 7.8,...

PT-2017-12035

Name of the Vulnerable Software and Affected Versions IDERA Uptime Monitor version 7.8 Description The issue concerns directory traversal in the file name parameter of the "get2post.php" file. Recommendations For IDERA Uptime Monitor version 7.8, consider restricting access to the get2post.php fi...