OpenSSL Vulnerabilities

The OpenSSL library embedded in the GlobalProtect™ agent, TerminalServer™ agent and UserID™ agent is affected by the following public vulnerabilities: CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2109, and CVE-2016-2176 Ref 100669, 100133, PAN-60833. At the time of this advisory and in t...

OpenSSL Vulnerabilities

The OpenSSL library embedded in the GlobalProtect™ agent, TerminalServer™ agent and UserID™ agent is affected by the following public vulnerabilities: CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2109, and CVE-2016-2176 Ref 100669, 100133, PAN-60833...

SQL Injection Vulnerability in the userId Parameter of Hi-Read Media's Digital Newspaper System

Joyful Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. The product has a SQL injection vulnerability, the vulnerability URL is: index.php?mod=admin&con=subscribe&act=unsubscribe&subsId=31&userId=880&paperscn=%B8%D6%CC%FA%C2%AF%C1%CF&papersen=gtll, the...

CVE-2016-4503

Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectors related to reading a cookie parameter containing a UserId value...

CVE-2016-4503: Improper Authentication

Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectors related to reading a cookie parameter containing a UserId value...

PT-2016-5986

Name of the Vulnerable Software and Affected Versions Moxa Device Server Web Console version 5232-N Description The issue allows remote attackers to bypass authentication, and consequently modify settings and data, via vectors related to reading a UserId value from a cookie parameter...

Live800在线客服系统 chatListForVisitor.jsp userId 参数sql注入

No description provided by source...

Digital Campus 2.0 Platform数字校园平台 /Code/Common/UpdateOnLine.aspx 文件 UserID 参数 SQL注入漏洞

No description provided by source...

Mymps v5.0 /wap/index.php 参数userid存在SQL注入

No description provided by source...

iwebmall商城 /action/shop/get_appraise.php 参数userid注入

No description provided by source...

JPORTAL资源整合SQL注射漏洞

简要描述： JPORTAL资源整合SQL注射漏洞 详细说明： 突然发现大汉网络的JPORTAL资源整合系统在一般应用里面，SO... 我来了 文件路径： /pertoolsubsite/read/favoajaxforgen.jsp 部分代码为： else if"DO".equalsopr if !type.equals"11"||url.trim.length==0||paperTitle.trim.length==0 out.clear; out.print"false"; return; ArrayList list =...

SMB UserID Detection

Binary data 8627.prm...

用友NC-IUFO系统通用SQL注入(三)

简要描述： ... 详细说明： 该系统“忘记密码”模块存在sql注入漏洞 链接地址为：/epp/core/forgetpwd.jsp?pageId=forgetpwd&rand=1234 说明：输入用户名和邮箱后提交，程序会提交给 /epp/core（可从抓取的数据包中看到）， 漏洞参数：userid 数据库系统：oracle 注入类型：AND/OR time-based blind 这里直接给出证明案例（列出数据库实例名称即可、不深入）： 0x01; http://nc.xhlbdc.com/epp/ POST /epp/core HTTP/1.1 Host: nc.xhlbdc.co...

Sql injection

Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL commands via the 1 sectionID parameter to admin/managersection.php, 2 userID parameter to admin/edituser.php, 3 username parameter to admin/admin.php, or 4 title parameter to...

PT-2015-4198

Name of the Vulnerable Software and Affected Versions Absolut Engine version 1.73 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via several parameters, including the sectionID parameter to "admin/managersection.php", the userID...

CVE-2014-9435: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL commands via the 1 sectionID parameter to admin/managersection.php, 2 userID parameter to admin/edituser.php, 3 username parameter to admin/admin.php, or 4 title parameter to...

CVE-2014-8995

SQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary SQL commands via the UserId cookie...

Sql injection

SQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary SQL commands via the UserId cookie...

CVE-2014-8995

SQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary SQL commands via the UserId cookie...

PT-2014-8774

Name of the Vulnerable Software and Affected Versions Maarch LetterBox version 2.8 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the UserId cookie. Recommendations For Maarch LetterBox version 2.8, consider restricting access to sensitive data and...