EUVD-2018-3134

Malware in sbrugna...

EUVD-2018-3133

Malware in sbrugna...

MyBiz MyProcureNet 5.0.0 File Upload / Cross Site Scripting Vulnerabilities

MyBiz MyProcureNet version 5.0.0 suffers from remote file upload and cross site scripting vulnerabilities. title: Arbitrary File Upload & Cross-site scripting product: MyBiz MyProcureNet vulnerable version: 5.0.0 fixed version: unknown CVE number: - impact: Critical homepage: http://www.mybiz.net...

MyBiz MyProcureNet Arbitrary File Upload Vulnerability

MyBiz MyProcureNet is a procurement process automation solution from MyBiz Solutions Malaysia. A security vulnerability exists in MyBiz MyProcureNet version 5.0.0, which originates from an attacker being able to adjust the 'HiddenFieldControlCustomWhiteListedExtensions' parameter and add arbitrar...

MyBiz MyProcureNet Cross-Site Scripting Vulnerability

MyBiz MyProcureNet is a procurement process automation solution from MyBiz Solutions Malaysia. A cross-site scripting vulnerability exists in ProxyPage.aspx in MyBiz MyProcureNet version 5.0.0. A remote attacker can exploit this vulnerability to inject malicious client-side script...

Design/Logic Flaw

An issue was discovered in MyBiz MyProcureNet 5.0.0. A malicious file can be uploaded to the webserver by an attacker. It is possible for an attacker to upload a script to issue operating system commands. This vulnerability occurs because an attacker is able to adjust the...

Cross site scripting

An XSS issue was discovered in MyBiz MyProcureNet 5.0.0. This vulnerability within "ProxyPage.aspx" allows an attacker to inject malicious client side scripting which will be executed in the browser of users if they visit the manipulated site...

CVE-2018-11091

An issue was discovered in MyBiz MyProcureNet 5.0.0. A malicious file can be uploaded to the webserver by an attacker. It is possible for an attacker to upload a script to issue operating system commands. This vulnerability occurs because an attacker is able to adjust the...

CVE-2018-11090

An XSS issue was discovered in MyBiz MyProcureNet 5.0.0. This vulnerability within "ProxyPage.aspx" allows an attacker to inject malicious client side scripting which will be executed in the browser of users if they visit the manipulated site...

CVE-2018-11090

An XSS issue was discovered in MyBiz MyProcureNet 5.0.0. This vulnerability within "ProxyPage.aspx" allows an attacker to inject malicious client side scripting which will be executed in the browser of users if they visit the manipulated site...

CVE-2018-11091

An issue was discovered in MyBiz MyProcureNet 5.0.0. A malicious file can be uploaded to the webserver by an attacker. It is possible for an attacker to upload a script to issue operating system commands. This vulnerability occurs because an attacker is able to adjust the...

CVE-2018-11090

Affected software: MyBiz MyProcureNet 5.0.0. Vulnerability: Cross-site scripting (XSS) in the ProxyPage.aspx page. Root cause / detail: An attacker can inject malicious client-side scripting that is executed in the browser of users who visit the manipulated site. Impact (as stated): Malicious scr...

CVE-2018-11091

CVE-2018-11091 affects MyBiz MyProcureNet 5.0.0. A malicious actor can upload a script by tampering with HiddenFieldControlCustomWhiteListedExtensions, adding an allowed extension (e.g., .asp) so files like secctest.asp are accepted. This enables arbitrary command execution on the webserver and p...

CVE-2018-11090: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in MyBiz MyProcureNet 5.0.0. This vulnerability within "ProxyPage.aspx" allows an attacker to inject malicious client side scripting which will be executed in the browser of users if they visit the manipulated site...

PT-2018-10302

Name of the Vulnerable Software and Affected Versions MyBiz MyProcureNet version 5.0.0 Description An issue allows a malicious file to be uploaded to the webserver, enabling an attacker to upload a script and issue operating system commands. This occurs because the...

CVE-2018-11091: Unrestricted Upload of File with Dangerous Type

An issue was discovered in MyBiz MyProcureNet 5.0.0. A malicious file can be uploaded to the webserver by an attacker. It is possible for an attacker to upload a script to issue operating system commands. This vulnerability occurs because an attacker is able to adjust the...

PT-2018-10301

Name of the Vulnerable Software and Affected Versions MyBiz MyProcureNet version 5.0.0 Description A cross-site scripting XSS issue was found, allowing an attacker to inject malicious client-side scripting into the "ProxyPage.aspx" page. This scripting will be executed in the browser of users who...