Ya Qi technology program add any administrator 0day-vulnerability warning-the black bar safety net

Site background the lack of verification can be remotely add an administrator user and log in the background Keywords: inurl:ShowInfo. asp? ShowId= Find the website then in the website address added on: admin/UserManage. asp? action=UserAdd Go in to add an administrator, and then use the Add...

CVE-2009-2736

CVE-2009-2736 concerns sun-jester OpenNews 1.0. The vulnerability is a static code injection in admin.php that allows remote authenticated administrators to inject arbitrary PHP code into config.php via the “Overall Width” field in a setconfig action. The issue originates from the admin.php compo...

Predictable session ID vulnerability in Serene Bach

Overview Serene Bach from SerendipityNZ Limited contains a vulnerability in which it generates predictable session ID's. Serene Bach from SerendipityNZ Limited is a weblog management system. Serene Bach contains a vulnerability in which it generates predictable session ID's. Impact A remote...

CVE-2008-6541: Improper Input Validation

Unrestricted file upload vulnerability in the file manager module in DotNetNuke before 4.8.2 allows remote administrators to upload arbitrary files and gain privileges to the server via unspecified vectors...

ESET Remote Administrator XSS Vulnerability

This host is running ESET Remote Administrator and is prone to remote Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodesetremoteadministratorxssvuln.nasl 6517 2017-07-04 13:34:20Z cfischer $ ESET Remote Administrator XSS Vulnerability Authors: Nikita MR Copyright:...

ESET Remote Administrator Version Detection

This script detects the installed version of ESET Remote Administrator. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

ESET Remote Administrator XSS Vulnerability

ESET Remote Administrator is prone to a remote Cross-Site Scripting vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

ESET Remote Administrator远程脚本注入漏洞

BUGTRAQ ID: 33633 CVECAN ID: CVE-2009-0548 ESET Remote Administrator用于远程安装和集中管理网络中的ESET杀毒软件。 ESET Remote Administrator没有正确地验证对Additional Report Settings接口的输入，远程攻击者可以通过提交恶意请求注入任意HTML和脚本代码，并在用户查看报表的时候执行注入的代码。 Eset Remote Administrator 3.0.35 厂商补丁： Eset ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2009-0548

Cross-site scripting XSS vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2009-0548

CVE-2009-0548 is a remote cross-site scripting vulnerability in the ESET Remote Administrator’s Additional Report Settings interface. The issue affects RSA before a patched version (per sources) and is due to insufficient input validation, enabling arbitrary HTML/JS injection when a user views re...

CVE-2009-0548

Cross-site scripting XSS vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2009-0548: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Additional Report Settings interface in ESET Remote Administrator before 3.0.105 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

ESET远程管理员HTML注入漏洞

BUGTRAQ ID: 33633 ESET Remote Administrator用于远程管理ESET应用程序。 传递给"Additional Report Settings"接口的数据在使用前缺少过滤，可导致任意HTML代码注入，当恶意报告查看时可导致脚本在目标用户浏览器上执行。 目前没有详细漏洞细节提供。 Eset ESET Remote Administrator 3.0.35 ESET 3.0.105已经修补此漏洞： http://www.eset.eu/products/eset-remote-administrator-3...

ESET Remote Administrator < 3.0.105 Additional Report Settings XSS

ESET Remote Administrator is installed on the remote system. The installed version is less than version 3.0.105, and such versions are reportedly affected by an HTML injection vulnerability. An attacker can exploit this vulnerability to cause arbitrary HTML and script code to be executed with in...

CVE-2008-2762

SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administrators to execute arbitrary SQL commands via the orderby parameter...

Directory traversal

Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the module parameter...

CVE-2003-1488: Improper Input Validation

The 1 verifadmin.php and 2 checkadmin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the loggedin parameter set to any value, such as 1...

CVE-2006-5738

Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors...

PT-2006-6426 · Punbb · Punbb

Name of the Vulnerable Software and Affected Versions: PunBB versions prior to 1.2.14 Description: The issue allows remote authenticated administrators to execute arbitrary SQL commands. Recommendations: For versions prior to 1.2.14, update to version 1.2.14 or later to resolve the issue...