CVE-2009-3731

CVE-2009-3731 describes multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help used by VMware products (e.g., vCenter/ESX/Server, Lab Manager, Stage Manager). The root cause is insufficient sanitization of inbound input in WebWorks Help output formats, enabling remote attackers to i...

CVE-2009-3731: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x; VMware vCenter Lab Manager 3.x and 4.x before 4.0.1; VMware Stage Manager 1.x before 4.0.1; WebWorks...

CVE-2009-3419

SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter...

Sql injection

SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the 1 begin parameter and the 2 PATHINFO...

CVE-2009-3419

SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter...

CVE-2009-3420

Multiple cross-site scripting XSS vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the 1 begin parameter and the 2 PATHINFO...

CVE-2009-3419

CVE-2009-3419 describes an SQL injection in the Miniweb Publisher module 2.0, via index.php and the historymonth parameter. Affected software: Miniweb Publisher module 2.0 (index.php). Root cause: unsafely handled input in historymonth leading to SQL command execution. Impact: remote attackers co...

CVE-2009-3420

CVE-2009-3420: XSS in Miniweb’s Publisher module 2.0 (index.php) via begin parameter and PATH_INFO. Affected: Publisher module 2.0 for Miniweb; vulnerability allows remote injection of script/HTML; CVSS v2 base score 4.3 (Medium) with partial integrity impact. Exploitation details: remote attacke...

CVE-2009-3419: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter...

CVE-2009-3420: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the 1 begin parameter and the 2 PATHINFO...

CVE-2009-3315

SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field...

Sql injection

SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field...

CVE-2009-3315

SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field...

CVE-2009-3315

The affected software is NeLogic Nephp Publisher Enterprise (versions 3.5.9 and 4.5). The vulnerability is a SQL injection in admin/index.php via the Username field, caused by improper handling of input in the web application. This allows remote attackers to execute arbitrary SQL commands, with t...

CVE-2009-3315: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field...

Nephp Publisher Enterprise 4.5 SQL Injection

NEPHP publisher SQLi login bypass By learn3r hacker from Nepal [email protected] Affected version: v 3.5.9 or may be lower... Username: validusername' eg. Administrator/ Password: learn3r or whatever Or Username: ' or 1='1' password: learn3r or whatever Live Demo:...

Nephp Publisher Enterprise 4.5 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. NEPHP publisher SQLi login bypass By learn3r hacker from Nepal [email protected] Affected version: v 3.5.9 or may be lower... Username: validusername' eg. Administrator/ Password: learn3r or whatever Or Username: ' or 1='1' password: learn3r or whatever...

Nephp Publisher Enterprise 4.5 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Nephp Publisher Enterprise 4.5 Auth Bypass SQL Injection Vulnerability ======================================================================== NEPHP publisher SQLi...

Nephp Publisher Enterprise 4.5 - Authentication Bypass

Nephp Publisher Enterprise 4.5 - Authentication Bypass NEPHP publisher SQLi login bypass By learn3r hacker from Nepal [email protected] Affected version: v 3.5.9 or may be lower... Username: validusername' eg. Administrator/ Password: learn3r or whatever Or Username: ' or 1='1' password:...