CVE-2017-17873

Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...

CVE-2017-17874: Unrestricted Upload of File with Dangerous Type

Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI...

CVE-2017-17873: Improper Neutralization of Special Elements used in an SQL Command

Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...

CVE-2017-17873

Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...

CVE-2017-17874

Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI...

CVE-2017-17873

CVE-2017-17873 affects Vanguard Marketplace Digital Products PHP 1.4. It describes an SQL injection via PATH_INFO to the /p URI in the PHP-based scripts used for online trading, allowing potentially unauthorized access to data with network-exposed risk. The CVSSv3 vector is CVSS:3.0/AV:N/AC:L/PR:...

CVE-2017-17874

CVE-2017-17874 affects Vanguard Marketplace Digital Products PHP 1.4. A vulnerability allows arbitrary file upload via the“Add a new product” or “Add a product preview” actions, which can result in a PHP file being accessible under an uploads/ URI. Public references in the record indicate an expl...

PT-2017-15063

Name of the Vulnerable Software and Affected Versions Vanguard Marketplace Digital Products PHP version 1.4 Description The issue allows for arbitrary file upload through actions such as "Add a new product" or "Add a product preview". This can result in a .php file being made accessible under a...

PT-2017-15062

Name of the Vulnerable Software and Affected Versions Vanguard Marketplace Digital Products PHP version 1.4 Description The issue is related to SQL Injection, which occurs via the PATH INFO to the /p URI. Recommendations For version 1.4, update to a newer version that contains a fix for this issu...

Vanguard 1.4 SQL Injection

Exploit Title: Vanguard - Marketplace Digital Products PHP 1.4 - SQL Injection Dork: N/A Date: 11.12.2017 Vendor Homepage: https://www.codegrape.com/user/Vanguard/portfolio Software Link: https://www.codegrape.com/item/vanguard-marketplace-digital-products-php/15825 Version: 1.4 Category: Webapps...

Vanguard 1.4 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Vanguard - Marketplace Digital Products PHP 1.4 - SQL Injection Dork: N/A Date: 11.12.2017 Vendor Homepage: https://www.codegrape.com/user/Vanguard/portfolio Software Link:...

Vanguard 1.4 - Arbitrary File Upload

Vanguard 1.4 - Arbitrary File Upload Exploit Title: Vanguard - Marketplace Digital Products PHP 1.4 - Arbitrary File Upload Dork: N/A Date: 11.12.2017 Vendor Homepage: https://www.codegrape.com/user/Vanguard/portfolio Software Link:...

Vanguard 1.4 - SQL Injection

Exploit Title: Vanguard - Marketplace Digital Products PHP 1.4 - SQL Injection Dork: N/A Date: 11.12.2017 Vendor Homepage: https://www.codegrape.com/user/Vanguard/portfolio Software Link: https://www.codegrape.com/item/vanguard-marketplace-digital-products-php/15825 Version: 1.4 Category: Webapps...

Vanguard 1.4 - Arbitrary File Upload

Exploit Title: Vanguard - Marketplace Digital Products PHP 1.4 - Arbitrary File Upload Dork: N/A Date: 11.12.2017 Vendor Homepage: https://www.codegrape.com/user/Vanguard/portfolio Software Link: https://www.codegrape.com/item/vanguard-marketplace-digital-products-php/15825 Demo:...

portal.vanguardlogistics.com XSS vulnerability

Vulnerable URL: https://portal.vanguardlogistics.com/apps/dashboard/?reqir=';%3C/script%3E%3Cscript%3Ealert'OPENBUGBOUNTY';%3C/script%3E%3Cscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

ICS-CERT Alert on Easily Hackable Road Signs

A new, remotely exploitable vulnerability in Daktronics’ Vanguard software could make it even easier for attackers to hack electronic road signs, a task that was reportedly never very difficult to begin with. Daktronics’ Vanguard dynamic highway message sign configuration software was initially...

ManageEngine Device Expert 5.6 Directory Traversal

ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet Unauthenticated Remote Directory Traversal Database Backup / auth-conf.xml Disclosure Exploit product homepage: http://www.manageengine.com/products/device-expert/ file tested: ManageEngineDeviceExpert.exe tested against:...

ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet - Directory Traversal

ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet - Directory Traversal ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet Unauthenticated Remote Directory Traversal Database Backup / auth-conf.xml Disclosure Exploit product homepage:...

ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet - Directory Traversal

ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet Unauthenticated Remote Directory Traversal Database Backup / auth-conf.xml Disclosure Exploit product homepage: http://www.manageengine.com/products/device-expert/ file tested: ManageEngineDeviceExpert.exe tested against:...

Vanguard Defense Industries (VDI) Hacked for #Antisec Operation

Vanguard Defense Industries VDI Hacked for Antisec Operation AntiSec is targeting defense contractors again. Continuing their beef with law enforcement, and organizations that offer them support, they have targeted Richard Garcia, the Senior Vice President of Vanguard Defense Industries VDI...