Inventory 1.0 Multiple SQL Vulnerabilities

Exploit Title: Inventory 1.0 Multiple SQL Vulnerabilities Date: 10/19/12 Author: G13 Twitter: @g13net Software Site: https://github.com/farevalod/inventory Version: 1.0 Category: webapp php dc585 ToC 0x01 Description 0x02 SQL Injection 0x03 Vendor Notification 0x01 Description PHP + SQL Inventory...

Inventory 1.0 SQL Injection

Exploit Title: Inventory 1.0 Multiple SQL Vulnerabilities Date: 10/19/12 Author: G13 Twitter: @g13net Software Site: https://github.com/farevalod/inventory Version: 1.0 Category: webapp php dc585 ToC 0x01 Description 0x02 SQL Injection 0x03 Vendor Notification 0x01 Description PHP + SQL Inventory...

Inventory - Multiple Cross-Site Scripting SQL Injections

Inventory - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/56293/info Inventory is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Inventory - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/56293/info Inventory is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials...

Adobe Extension Manager Installed

Adobe Extension Manager, used to add or remove extensions for applications in the Adobe Creative Suite, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62687; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Adobe Bridge Installed

Adobe Bridge is installed on the remote Windows host. Bridge is used to organize creative assets, and provide centralized access for applications in the Adobe Creative Suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62681; scriptversion"1.13";...

SpiceWorks 6.0.00993 - Multiple Script Injection Vulnerabilities

SpiceWorks 6.0.00993 - Multiple Script Injection Vulnerabilities !-- Title: Spiceworks 6.0.00993 Multiple Script Injection Vulnerabilities Vendor: Spiceworks Inc. Product web page: http://www.spiceworks.com Affected version: 6.0.00993 and 6.0.00966 Summary: The Spiceworks IT Desktop delivers near...

Fedora Update for ocsinventory FEDORA-2012-5464

Check for the Version of ocsinventory OpenVAS Vulnerability Test Fedora Update for ocsinventory FEDORA-2012-5464 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 17 Update: glpi-pdf-0.83.3-1.fc17

This GLPI plugin enables you to print, in pdf format, the information sheet of an equipment or a software of the inventory...

[SECURITY] Fedora 17 Update: glpi-0.83.4-1.fc17

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Multiple CSRF Vulnerabilities in [GLPI Version 0.83.2]

Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in GLPI Version 0.83.2. The following is the disclosure document: Title: Multiple CSRF Vulnerabilities in GLPI Version 0.83.2 ------------------------------------------------------------------------...

Tivoli Provisioning Manager Express ActiveX RunAndUploadFile vulnerability

Added: 04/13/2012 CVE: CVE-2012-0198 BID: 52252 OSVDB: 79735 Background Tivoli Provisioning Manager Express for Software Distribution is a software inventory and distribution solution. Problem A buffer overflow vulnerability in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control...

[SECURITY] Fedora 17 Update: ocsinventory-2.0.5-1.fc17

Open Computer and Software Inventory Next Generation is an application designed to help a network or system administrator keep track of the computers configuration and software that are installed on the network. OCS Inventory is also able to detect all active devices on your network, such as...

Bitsmith Personal Knowbase Detection

Bitsmith Personal Knowbase is installed on the remote host. Bitsmith Personal Knowbase is personal knowledge base storage software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58648; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Multi-Location Inventory CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Multi-Location Inventory CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/multilocation-inventory/32183/ Category:: webapps Demo : http://71207400.demo.aitoc.com/index.php/admin/ Greetz: Inj3ct0r...

Fedora Update for glpi FEDORA-2012-1534

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2012-1534 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 16 Update: glpi-0.80.7-1.fc16

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

[SECURITY] Fedora 15 Update: glpi-0.78.5-3.svn17464.fc15

GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...

Design/Logic Flaw

The 1 bin/invscoutClientVPDSurvey and 2 sbin/invscoutlsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file...

[SECURITY] Fedora 16 Update: ipmitool-1.8.11-8.fc16

This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel...