JVN#80436657 Webservice-DIC yoyaku_v41 vulnerable to command injection

yoyakuv41 from Webservice-DIC is a software to manage conference room reservations. yoyakuv41 contains a command injection vulnerability. Impact An arbitrary command could be executed with the privilege of the server where yoyakuv41 runs. Solution Update the Software Update to the latest version...

Cross site scripting

Cross-site scripting XSS vulnerability in AD2000 free-sw leger aka Web Conference Room Free 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2240

The CVE-2009-2240 issue affects leger (free edition) from AD2000 (Web Conference Room Free). A cross-site scripting (XSS) vulnerability exists in version 1.6.4 and earlier, allowing an attacker to cause arbitrary script execution in a user’s browser. The vendor addressed this with an update in ve...

JVN#57036470 Cross-site scripting vulnerability in leger (free edition)

leger free edition from 'AD2000' is a software to manage conference room reservations. leger free edition contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the...

Video chat rooms password cracking techniques-vulnerability warning-the black bar safety net

Reprint when you didn't see the picture, we only will look at. Because the working relationship, and I qq every Monday to Friday online, but very few people add me as a friend, is probably the old bar, after all, are 2 4, online Dating that period of burning passion had left me far away. But that...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 log parameter to a logviewer.jsp and b log.jsp; 2 search parameter to c group-summary.jsp; 3 username parameter to d user-properties.jsp; 4...

CVE-2009-0496: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 log parameter to a logviewer.jsp and b log.jsp; 2 search parameter to c group-summary.jsp; 3 username parameter to d user-properties.jsp; 4...

Meeting Room Booking System (MRBS) month.php area Parameter SQL Injection

The remote host is running Meeting Room Booking System MRBS, a PHP application for booking meeting rooms or other resources. The version of MRBS installed on the remote host fails to sanitize user-supplied input to the 'area' parameter of the 'month.php' script before using it to construct databa...

ClearBudget 0.6.1 Insecure Database

ClearBudget v0.6.1 Insecure Database Download + Discovered By Room-Hacker Ex : http://site.il/db/budget.sqlite Demo : http://clearbudget.douteaud.com/demo/0-6-1//db/budget.sqlite...

ClearBudget 0.6.1 - Insecure Database Disclosure

ClearBudget 0.6.1 - Insecure Database Disclosure + ClearBudget v0.6.1 Insecure Database Download + Discovered By Room-Hacker Ex : http://site.il/db/budget.sqlite Demo : http://clearbudget.douteaud.com/demo/0-6-1//db/budget.sqlite milw0rm.com 2009-02-05...

ClearBudget 0.6.1 (Misspelled htaccess) Insecure DD Vulnerability

Exploit for unknown platform in category web applications ================================================================= ClearBudget 0.6.1 Misspelled htaccess Insecure DD Vulnerability ================================================================= + ClearBudget v0.6.1 Insecure Database...

ClearBudget 0.6.1 - Insecure Database Disclosure

ClearBudget v0.6.1 Insecure Database Download + Discovered By Room-Hacker Ex : http://site.il/db/budget.sqlite Demo : http://clearbudget.douteaud.com/demo/0-6-1//db/budget.sqlite milw0rm.com 2009-02-05...

Openfire多个跨站脚本和目录遍历漏洞

BUGTRAQ ID: 32935,32937,32938,32939,32940,32943,32944,32945 Openfire（原名为Wildfire）是一个采用Java开发的跨平台开源实时协作（RTC）服务器。...

Heap overflow

The Local ZIM Server zcs.exe in Zilab Chat and Instant Messaging ZIM Server 2.1 and earlier allow remote attackers to execute arbitrary code via 1 heap-based buffer overflows involving multiple vectors including a long room name and a long source account, and 2 a stack-based buffer overflow with ...

CVE-2008-4620

SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...

CVE-2008-4620

SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...

Sql injection

SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...

CVE-2008-4620

SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...

CVE-2008-4620: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...

Meeting Room Booking System (MRBS) 1.4 - SQL Injection

Meeting Room Booking System MRBS 1.4 - SQL Injection "MRBS is a system for multi-site booking of meeting rooms. Rooms are grouped by building/area and shown in a side-by-side view. Although the goal was initially to book rooms, MRBS can also be used to book any resource computer, planes, whatever...