userSpice 4.3 Cross Site Scripting

Application UserSpice PHP user management Vulnerability userSpice alert"1"&csrf=8b1339546d6af1e7536da0a705302e9c&updatebio= Vulnerable code: id?" class="nounderline"id?...

CVE-2018-2691

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Proxy User Delegation. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-2691

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Proxy User Delegation. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-2684

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Registration Process. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via...

CVE-2018-2684

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Registration Process. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via...

Code injection

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Registration Process. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via...

Code injection

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Proxy User Delegation. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-2691

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Proxy User Delegation. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-2691

The CVE-2018-2691 entry concerns Oracle E-Business Suite’s Oracle User Management component (subcomponent: Proxy User Delegation). Affected versions are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, and 12.2.7. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise...

CVE-2018-2691

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Proxy User Delegation. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-2684

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Registration Process. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via...

CVE-2018-2684

CVE-2018-2684 affects Oracle E-Business Suite, specifically the Oracle User Management component (Registration Process). Affected supported versions are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. The vulnerability allows a high-privileged attacker who can access the system over HTTP to co...

CVE-2018-2684

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Registration Process. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via...

ZUUSE BEIMS ContractorWeb .NET Unauthorized Operation Vulnerability

ZUUSE BEIMS ContractorWeb .NET is a suite of infrastructure management software from ZUUSE Australia. An unauthorized operation vulnerability exists in ZUUSE BEIMS ContractorWeb .NET version 5.18.0.0. An attacker can exploit this vulnerability to access multiple /UserManagement/privileged modules...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-02402)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-02403)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

CVE-2018-5328

ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authenticating the user; an attacker can misuse these functionalities to perform unauthorized actions, as demonstrated by Edit User Details...

Concrete CMS: Administrators can add other administrators

Because I know you like crayons here's a token of my appreciation... :D F253771 Concrete5 version: 8.3.1 Release date: 12/20/17 Where: Core CMS Vulnerability: Privilege Escalation OTG-AUTHZ-003 Privilege escalation occurs when a user gets to access more resources than is normally allowed when it...

phpRegister 1.0 Cross Site Scripting

Exploit Title: phpRegister - PHP Login And User Management Script - xss Google Dork: N/A Date: 2017/31/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: https://phpregister.com/ Software Buy:...

Huawei P9 Elevation of Privilege Vulnerability

Huawei P9 is a smartphone from the Chinese company Huawei.Audio driver is one of the audio drivers. An elevation of privilege vulnerability exists in the Huawei P9. An unauthenticated attacker could use this vulnerability to bypass the phone activation step, enter the user management page and...