CVE-2018-19645

CVE-2018-19645 is an authentication bypass vulnerability in Solutions Business Manager (SBM, formerly Serena SBM) affecting versions prior to 11.5. CVSSv3 base score 9.8 (CRITICAL); attack vector NETWORK, no privileges required, no user interaction. Root cause details are not specified beyond aut...

Code injection

Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains...

CVE-2018-7682

Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains...

CVE-2018-7682

Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains...

CVE-2018-7682

Micro Focus Solutions Business Manager (SBM) prior to version 11.4 is affected by a cross-domain call vulnerability affecting SBM RESTful services. The CVE entry notes that an attacker could invoke SBM RESTful endpoints across domains, implying potential information exposure or unintended access ...

PT-2018-18208

Name of the Vulnerable Software and Affected Versions Micro Focus Solutions Business Manager versions prior to 11.4 Description The issue allows a user to invoke SBM RESTful services across domains. Recommendations For versions prior to 11.4, update to version 11.4 or later to resolve the issue...

CVE-2018-7682: Insertion of Sensitive Information into Log File

Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains...

sbmopleidingen.be XSS vulnerability

Vulnerable URL: http://www.sbmopleidingen.be/opleidingen/zoek?ZoekTrefwoord='-confirmOPENBUGBOUNTY-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1728874 VIP website status:| No...

Log1CMS 2.0 (ajax_create_folder.php) Remote Code Execution

No description provided by source. ?php / +-----------------------------------------------------------+ + Log1CMS 2.0ajaxcreatefolder.php Remote Code Execution + +-----------------------------------------------------------+ Web-App : Log1CMS 2.0 Vendor : http://log1cms.sourceforge.net/...

PHP SQL Server (MSSQL) Query Analyzer Remote Code Execution

Exploit for php platform in category web applications ?php / +------------------------------------------------------------------+ + PHP SQL Server MSSQL Query Analyzer Remote Code Execution + +------------------------------------------------------------------+ Web-App : PHP SQL Server MSSQL Query...

PhpTSMadmin 0.7.0 (functions.php) Remote Code Execution

Exploit for php platform in category web applications ?php / +------------------------------------------------------------------+ + PhpTSMadmin 0.7.0 functions.php Remote Code Execution + +------------------------------------------------------------------+ Web-App : PhpTSMadmin 0.7.0 Vendor :...

Log1 CMS 2.0 - ajax_create_folder.php Remote Code Execution

Log1 CMS 2.0 - ajaxcreatefolder.php Remote Code Execution ?php / +-----------------------------------------------------------+ + Log1CMS 2.0ajaxcreatefolder.php Remote Code Execution + +-----------------------------------------------------------+ Web-App : Log1CMS 2.0 Vendor :...

Log1 CMS 2.0 - 'ajax_create_folder.php' Remote Code Execution

?php / +-----------------------------------------------------------+ + Log1CMS 2.0ajaxcreatefolder.php Remote Code Execution + +-----------------------------------------------------------+ Web-App : Log1CMS 2.0 Vendor : http://log1cms.sourceforge.net/ Vulnerability : Remote Code Execution Author ...