2664 matches found
Extcalendar RFI
Remote file inclusion via mosConfigabsolutepath Vulnerability Type: Remote File Include For the exploit source code contact DSquare Security sales team...
用友ICC网站客服系统远程代码执行漏洞
简要描述： 全部采用用友ICC客服系统,上线前没有做严格测试!导致漏洞产生!全部可以获得管理权限! 网络游戏 盛大网络 光通娱乐 在线销售 麦考林 母婴之家 教育 威迅教育 中锐留学 汽车 广州本田 永达汽车 物流 顺丰速运 申通快递 保险 太平洋保险 PICC中国人保 软件/互联网 金山软件 政府 上海公共研发平台 金融 中国银联 环迅电子商务有限公司 IFX 大成基金 东亚银行 运营商 中国电信 中国联通 安徽电信 西藏电信 行业资讯平台 泡泡网 中国汽车网 中国塑料网 网易163 零售卖场 苏宁电器 详细说明： 以下网站客服系统全部采用用友ICC客服系统 网络游戏 盛大网络 光通娱...
Directory traversal
Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the logfilename parameter to 1 b2b/admin/log.jsp or 2 b2b/admin/logview.jsp in the Internet Sales crm.b2b component, or 3 ipc/admin/log.jsp or 4...
CVE-2012-1289
SAP NetWeaver 7.0 is affected by multiple directory traversal vulnerabilities in log.jsp/log_view.jsp under Internet Sales (crm.b2b) and Application Administration (com.sap.ipc.webapp.ipc). The root cause is improper validation of the logfilename parameter, allowing remote authenticated users to ...
CVE-2012-1290
The CVE-2012-1290 entry describes a Cross-site scripting (XSS) vulnerability in SAP NetWeaver 7.0, specifically in the Internet Sales (crm.b2b) module and the b2b/auction/container.jsp page. The issue is exploitable via the _loadPage parameter, allowing an attacker to inject arbitrary web script ...
Horde RCE
Horde unauthorized backdoor 11/11 - 02/12 Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Online Dating Sites Getting Around With Customers Data
Just in time for Valentine’s Day, the privacy watchdogs over at the Electronic Frontier Foundation have put together a guide for those tempted to dance the algorithm electric. Their findings: online dating services may be getting around with your personal data. Leading online dating sites hold on...
Wordpress CAC Featured Content 0.8 File Upload
File upload vulnerability in Wordpress CAC Featured Content plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Wordpress Kino Gallery 1.0 File Upload
File upload vulnerability in Wordpress Kino Gallery plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Wordpress Category List Portfolio Page 1.3 File Upload
File upload vulnerability in Wordpress Category List Portfolio Page plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Wordpress Really Easy Slider 0.1 File Upload
File upload vulnerability in Wordpress Really Easy Slider plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Joomla Component com_preventive 1.0.5 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Joomla Component com_awdwall 1.5.4 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Joomla Component com_webtv LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Joomla Component com_datafeeds 880 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Joomla Component com_hsconfig 1.5 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Joomla Component com_worldrates LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Joomla Component com_advertising 0.25 LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...