1602 matches found
Sql injection
SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
CVE-2010-2342
DMXReady Online Notebook Manager 1.0 is affected by a SQL injection in onlinenotebookmanager.asp via the ItemID parameter, enabling remote attackers to execute arbitrary SQL commands. This CVE (CVE-2010-2342) is corroborated by multiple sources in the connected documents (NVD, Red Hat advisory, C...
CVE-2010-2342
SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
CVE-2010-2342: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
DMXReady Online Notebook Manager SQL Injection
Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Online Notebook Manager SQLi Vulnerability Version:1.0 Price:$149.97 Vendor url:http://dmxready.com/?product=online-notebook-manager Published: 2010-06-09 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue®, S1ayer,d3c0d3r and to al...
Online Notebook Manager - SQL Injection
Online Notebook Manager - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Online Notebook Manager SQLi Vulnerability Version:1.0 Price:$149.97 Vendor url:http://dmxready.com/?product=online-notebook-manager Published: 2010-06-09 Greetz to:Sid3^effects, MaYur, M4n0...
Online Notebook Manager - SQL Injection
Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Online Notebook Manager SQLi Vulnerability Version:1.0 Price:$149.97 Vendor url:http://dmxready.com/?product=online-notebook-manager Published: 2010-06-09 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue™®, S1ayer,d3c0d3r and to al...
Online Notebook Manager SQL Injection Vulnerability
Exploit for php platform in category web applications =================================================== Online Notebook Manager SQL Injection Vulnerability =================================================== Author: L0rd CrusAd3r aka VSN email protected Exploit Title: Online Notebook Manager SQ...
Insufficient Authentication vulnerability in Acer notebooks (English)
Hello SecurityFocus! I want to warn you about vulnerability in Acer notebooks. It's Insufficient Authentication vulnerability. Which I found 28.04.2009 in two my notebooks. At these notebooks Windows XP Home Rus is using, in case of other OS the vulnerability can be also present. In Windows XP Ho...
Acer notebooks weak passwords
Administrator system account has empty password and password is not reset during initial system account setup...
CVE-2009-0657
Toshiba Face Recognition 2.0.2.32 allows physically proximate attackers to obtain notebook access by presenting a large number of images for which the viewpoint and lighting have been modified to match a stored image of the authorized notebook user...
CVE-2009-0657: Undefined Security Weakness
Toshiba Face Recognition 2.0.2.32 allows physically proximate attackers to obtain notebook access by presenting a large number of images for which the viewpoint and lighting have been modified to match a stored image of the authorized notebook user...
Sql injection
Multiple SQL injection vulnerabilities in DMXReady Online Notebook Manager 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password field. NOTE: some third parties report inability to verify this issue...
CVE-2009-0454
CVE-2009-0454 affects DMXReady Online Notebook Manager 1.1. Multiple SQL injection flaws reported in the login inputs (username/password) could allow remote attackers to execute arbitrary SQL. Original description notes verification issues by third parties; no remediation details are provided in ...
CVE-2009-0454: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in DMXReady Online Notebook Manager 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password field. NOTE: some third parties report inability to verify this issue...
DMXReady Online Notebook Manager 1.1 SQL Injection
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- = = XORON 2009C = = DMXReady online notebookmanager v1.1 Bypass SQL Injection Vuln. = =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- = = Script: DMXReady online...
Google Notebook和Google Bookmarks未明跨站脚本漏洞
BUGTRAQ ID: 30574 CNCAN ID：CNCAN-2008080706 Google Notebook是一款无需离开浏览器窗口，就能添加来自网页上的文本、图像和链接的服务。Google Bookmarks是一款书签服务。 Google Notebook和Google Bookmarks存在多个输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 提交畸形的邀请和注释，通过google notebook中的共享选项，其他用户查看它时可泄漏COOKIE信息。 Google...
creative-overflow.txt
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...
Creative Software AutoUpdate Engine - ActiveX Stack Overflow
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder property is vulnerable to stack-based buffer overflow after 260 bytes, @ 512 bytes overwrites SEH and allows code execution reliably. Original Advisory @ http://www.kb.cert.org/vuls/id/501843 and Vulnerability...
CVE-2008-0211
CVE-2008-0211 affects HP Compaq Business Notebook PC BIOS F.04–F.11. Local users may cause a DoS via unspecified vectors. The security bulletin HP-SSRT-080004 (HPSBGN02305) lists affected BIOS versions and corresponding updates across multiple notebook series (e.g., 2210, 2510, 2710, 6510/6710/67...