Lucene search
+L

86 matches found

CNVD
CNVD
added 2015/11/19 12:00 a.m.11 views

Open-Xchange OX Guard Cross-Site Scripting Vulnerability

Open-Xchange OX Guard is a security suite for email and documents. A cross-site scripting vulnerability exists in Open-Xchange OX Guard. This vulnerability can be exploited by remote attackers to execute arbitrary script code within the context of a user's browser program and steal cookie-based...

4.3CVSS6.9AI score0.01953EPSS
SaveExploits1References1
CNVD
CNVD
added 2015/10/03 12:00 a.m.9 views

Open-Xchange OX Guard SQL Injection Vulnerability

Open-Xchange OX Guard is a security suite for email and documents. A SQL injection vulnerability exists in the public key discovery API calls of Open-Xchange OX Guard, which allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain...

6.5CVSS8AI score0.01748EPSS
SaveExploits0References1
NVD
NVD
added 2015/09/28 4:59 p.m.15 views

CVE-2015-5703

SQL injection vulnerability in the public key discovery API call in Open-Xchange OX Guard before 2.0.0-rev8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

6.5CVSS7.9AI score0.01748EPSS
SaveExploits0References3
Prion
Prion
added 2015/09/28 4:59 p.m.14 views

Sql injection

SQL injection vulnerability in the public key discovery API call in Open-Xchange OX Guard before 2.0.0-rev8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

6.5CVSS8.5AI score0.01748EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2015/09/28 4:00 p.m.25 views

CVE-2015-5703

SQL injection vulnerability in the public key discovery API call in Open-Xchange OX Guard before 2.0.0-rev8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

7.9AI score0.01748EPSS
SaveExploits0References3
CVE
CVE
added 2015/09/28 4:00 p.m.47 views

CVE-2015-5703

Open-Xchange OX Guard contains a SQL injection vulnerability in the public key discovery API calls prior to version 2.0.0-rev8. The flaw allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Mitigation is to upgrade to 2.0.0-rev8 or later (as per the linked ...

6.5CVSS8.1AI score0.01748EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder