EUVD-2008-5574

Malware in sbrugna...

EUVD-2008-5575

Malware in sbrugna...

CVE-2008-5600

Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.mdb...

Sql injection

SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the password parameter aka passwd field in a login action. NOTE: some of these details are obtained from third party information...

Improper access control

Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.mdb...

CVE-2008-5600

Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.mdb...

CVE-2008-5600

CVE-2008-5600 affects Merlix Teamworx Server, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the database file (teamworx.mdb) via a direct request. The NVD notes a Medium severity (CVSS v2 base score 5.0, vector AV:N/AC...

CVE-2008-5599

SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the password parameter aka passwd field in a login action. NOTE: some of these details are obtained from third party information...

CVE-2008-5599: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in Merlix Teamworx Server allows remote attackers to execute arbitrary SQL commands via the password parameter aka passwd field in a login action. NOTE: some of these details are obtained from third party information...

CVE-2008-5600: Undefined Security Weakness

Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for teamworx.mdb...

Merlix Teamworx Server - File DisclosureBypass

Merlix Teamworx Server - File DisclosureBypass Merlix Teamworx Server DD/Bypass Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...