57 matches found
CVE-2020-13404: Improper Neutralization of Special Elements used in an OS Command
The ATOS/Sips aka Atos-Magento community module 3.0.0 to 3.0.5 for Magento allows command injection...
PT-2020-13521
Name of the Vulnerable Software and Affected Versions ATOS/Sips community module versions 3.0.0 through 3.0.5 for Magento Description The issue allows command injection. Recommendations For ATOS/Sips community module versions 3.0.0 through 3.0.5, update to a version outside of the affected range ...
Apple macOS Catalina Out-of-Bounds Read Vulnerability
Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers. sips is an image processing component. An out-of-bounds read vulnerability exists in Apple macOS Catalina. A remote attacker could exploit the vulnerability to cause unexpected application termination or...
Apple macOS Catalina sips component memory corruption vulnerability
Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers. sips is an image processing component. A security vulnerability exists in the sips component of Apple macOS Catalina prior to version 10.15. The vulnerability can be exploited to execute arbitrary code wi...
merchant-extranet.sips-atos.com XSS vulnerability
Vulnerable URL: https://merchant-extranet.sips-atos.com/usermng/retrieveLoginCredentials?company=sipsbelgium=http://tinyurl.com/ptxkuub Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...
SIPS <= 0.3.1 (box.inc.php) Remote File Include Vulnerability
No description provided by source. Title : SIPS = 0.3.1box.inc.php Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://sourceforge.net/projects/sips/ $$ : Free ERROR .. ... ..... ? include $configsipssys ./code/rssparser.inc.php; ? .. ... ..... ERROR RFI...
SIPS 0.2.2 User Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7134/info It has been reported that authentication is not required to view user account information. As a result, an unauthorized remote attacker may be able to view potentially sensitive information. This may aid in...
ViArt Shop RCE Vulnerability
ViArt Shop is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:viart:viartshop...
OfficeSIP Server 3.1 Denial Of Service Vulnerability
Exploit for windows platform in category dos / poc Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461...
OfficeSIP Server 3.1 - Denial of Service
OfficeSIP Server 3.1 - Denial of Service Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461...
OfficeSIP Server 3.1 - Denial of Service
Title : OfficeSIP Server Denial Of Service Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.officesip.com Advisory : http://secpod.org/blog/?p=461 http://secpod.org/advisories/SecPodExploitOfficeSIPServerDOSVuln.txt...
SIPS v0.2.2 Remote File Inclusion Vulnerability
/=============================================================================================================================================== | | o SIPS v0.2.2 Remote File Inclusion Vulnerability | | Software : SIPS v0.2.2 | Vendor : http://www.phpscripts-fr.net/scripts/hosted/sips022.zip |...
CVE-2003-1553: Exposure of Sensitive Information to an Unauthorized Actor
Haakon Nilsen Simple Internet Publishing System SIPS 0.2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password and other user information via a direct request to a user-specific configuration directory...
SIPS <= 0.3.1 (box.inc.php) Remote File Include Vulnerability
No description provided by source. Title : SIPS = 0.3.1box.inc.php Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://sourceforge.net/projects/sips/ $$ : Free ERROR .. ... ..... ? include $config"sipssys" ."/code/rssparser.inc.php"; ? .. ... ..... ERROR RFI...
SIPS <= 0.3.1 (box.inc.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================= SIPS .. ... ..... ERROR RFI http://target/path/sipssys/code/box.inc.php?configsipssys=SHELL Example: /sipssys/code/box.inc.php?configsipssys=http://target/path/shell.x /RFI...
SIPS 0.3.1 - box.inc.php Remote File Inclusion
SIPS 0.3.1 - box.inc.php Remote File Inclusion Title : SIPS .. ... ..... ERROR RFI http://target/path/sipssys/code/box.inc.php?configsipssys=SHELL Example: /sipssys/code/box.inc.php?configsipssys=http://target/path/shell.x /RFI """"""""""""""""""""" ajann,Turkey ... Im not Hacker! milw0rm.com...
SIPS <= 0.3.1(box.inc.php) Remote File Include Vulnerability
Title : SIPS = 0.3.1box.inc.php Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://sourceforge.net/projects/sips/ $$ : Free ERROR .. ... ..... ? include $config"sipssys" ."/code/rssparser.inc.php"; ? .. ... ..... ERROR RFI...
SIPS 0.3.1 - 'box.inc.php' Remote File Inclusion
Title : SIPS .. ... ..... ERROR RFI http://target/path/sipssys/code/box.inc.php?configsipssys=SHELL Example: /sipssys/code/box.inc.php?configsipssys=http://target/path/shell.x /RFI """"""""""""""""""""" ajann,Turkey ... Im not Hacker! milw0rm.com 2007-02-01...
CVE-2006-4733
PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system SIPS 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the configsipssys parameter. NOTE: the product's documentation recommends placing the...
