242 matches found
Sunnet eHRD Information Disclosure Vulnerability
Sunnet eHRD is a talent training and development management system. An information disclosure vulnerability exists in Sunnet eHRD. The vulnerability stems from eHRD improperly storing system files. An attacker can exploit the vulnerability to obtain confidential information via a specific URL...
PT-2020-12178
Name of the Vulnerable Software and Affected Versions Sunnet eHRD affected versions not specified Description The issue concerns the improper storage of system files in Sunnet eHRD, a human training and development management system. Attackers can exploit this by using a specific URL to capture...
CVE-2020-10509: Improper Neutralization of Input During Web Page Generation
Sunnet eHRD, a human training and development management system, contains vulnerability of Cross-Site Scripting XSS, attackers can inject arbitrary command into the system and launch XSS attack...
Sunnet eHRD Improper Access Control Vulnerability
Sunnet eHRD is a talent training and development management system. An improper access control vulnerability exists in Sunnet eHRD. An authenticated attacker could exploit the vulnerability to access unauthorized functionality and data via a specific URL...
PT-2020-12180
Name of the Vulnerable Software and Affected Versions Sunnet eHRD affected versions not specified Description The issue is related to Broken Access Control in Sunnet eHRD, a human training and development management system. After logging in, attackers can use a specific URL to access unauthorized...
PT-2020-12179
Name of the Vulnerable Software and Affected Versions Sunnet eHRD affected versions not specified Description The issue concerns a Cross-Site Scripting XSS vulnerability, which allows attackers to inject arbitrary commands into the system and launch an XSS attack. This can potentially lead to...
CVE-2020-10510: Incorrect Authorization
Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a specific URL, access unauthorized functionality and data...
CVE-2020-10508: Undefined Security Weakness
Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a specific URL and capture confidential information...
CVE-2019-11062
The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". The target server can be exploited without authentication...
CVE-2019-11062
The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". The target server can be exploited without authentication...
Command injection
The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". The target server can be exploited without authentication...
CVE-2019-11062 SUNNET WMPro v5.0 and v5.1 has OS Command Injection
The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". The target server can be exploited without authentication...
CVE-2019-11062
The CVE-2019-11062 entry affects SUNNET WMPro v5.0 and v5.1 for the eLearning system. Affected component: the API endpoint /teach/course/doajaxfileupload.php, where OS Command Injection is possible. Root cause described as unauthenticated remote command execution on the target server. Impact is h...
CVE-2019-11062: Improper Neutralization of Special Elements used in an OS Command
The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". The target server can be exploited without authentication...
PT-2019-12159 · Sunnet · Sunnet Wmpro
Name of the Vulnerable Software and Affected Versions: SUNNET WMPro versions 5.0 through 5.1 Description: The issue concerns an OS Command Injection vulnerability. It can be exploited via the "/teach/course/doajaxfileupload.php" API endpoint without requiring authentication. Recommendations: For...
Solaris 2.6 (sparc) : 104018-11
The remote host is missing Sun Security Patch number 104018-11 Solstice Site/SunNet/Domain Manager 2.3 Rev B: jumbo patch. Date this patch was last updated by Sun : Thu Jul 22 03:32:11 MDT 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...
Solaris 7 (sparc) : 104018-11
The remote host is missing Sun Security Patch number 104018-11 Solstice Site/SunNet/Domain Manager 2.3 Rev B: jumbo patch. Date this patch was last updated by Sun : Thu Jul 22 03:32:11 MDT 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...
Solaris 2.5.1 (sparc) : 104018-11
The remote host is missing Sun Security Patch number 104018-11 Solstice Site/SunNet/Domain Manager 2.3 Rev B: jumbo patch. Date this patch was last updated by Sun : Thu Jul 22 03:32:11 MDT 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...