Schneider Electric Web Designer 代码问题漏洞

Schneider Electric Web Designer is a web design tool from Schneider Electric France. A code issue vulnerability exists in Schneider Electric Web Designer that stems from the inclusion of an XML External Entity References Improperly Restricted vulnerability that could lead to information disclosur...

CVE-2024-12476: Improper Restriction of XML External Entity Reference

CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure, impacts workstation integrity and potential remote code execution on the compromised computer, when specific crafted XML file is imported in the Web Designer configuration...

PT-2024-10224 · Unknown · Web Designer

The Web Designer configuration tool is affected by an Improper Restriction of XML External Entity Reference issue, which could lead to information disclosure, impact workstation integrity, and potentially allow remote code execution on the compromised computer. This occurs when a specifically...

CVE-2022-38201

An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1. A remote, unauthenticated attacker can potentially induce an unsuspecting authenticated user to access an an attacker controlled domain...

CVE-2022-38201: URL Redirection to Untrusted Site

An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1. A remote, unauthenticated attacker can potentially induce an unsuspecting authenticated user to access an an attacker controlled domain...

PT-2022-24278 · Esri · Esri Portal For Arcgis Quick Capture Web Designer

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 through 10.9.1 Description: An unvalidated redirect issue exists, allowing a remote, unauthenticated attacker to potentially trick an authenticated user into accessing a domain...

CVE-2022-38201

CVE-2022-38201 affects Esri Portal for ArcGIS Quick Capture Web Designer, specifically versions 10.8.1–10.9.1. The issue is an unvalidated redirect, where an attacker can lure an authenticated user to a domain controlled by the attacker, potentially enabling credential/session exposure or user in...

CVE-2022-38201 An unvalidated redirect vulnerability exists in Esri ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1.

An unvalidated redirect vulnerability exists in Esri Portal for ArcGIS Quick Capture Web Designer versions 10.8.1 to 10.9.1. A remote, unauthenticated attacker can potentially induce an unsuspecting authenticated user to access an an attacker controlled domain...

Google Web Designer URI Parsing Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Google Web Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processi...

Luch Web Designer Multiple SQL Injection Vulnerabilities

No description provided by source. Title : Web Designed by LUCH Vulnerable to SQL Injection Vendor : http://www.luch.co.il Found by: p0pc0rn SQL --- http://site.com/page.asp?id=SQL http://site.com/cat.asp?catid=SQL http://site.com/catin.asp?productid=SQL POC --- http://site.com/page.asp?id=23 uni...

Luch Web Designer - Multiple SQL Injections

Luch Web Designer - Multiple SQL Injections Title : Web Designed by LUCH Vulnerable to SQL Injection Vendor : http://www.luch.co.il Found by: p0pc0rn SQL --- http://site.com/page.asp?id=SQL http://site.com/cat.asp?catid=SQL http://site.com/catin.asp?productid=SQL POC ---...

Luch Web Designer - Multiple SQL Injections

Title : Web Designed by LUCH Vulnerable to SQL Injection Vendor : http://www.luch.co.il Found by: p0pc0rn SQL --- http://site.com/page.asp?id=SQL http://site.com/cat.asp?catid=SQL http://site.com/catin.asp?productid=SQL POC --- http://site.com/page.asp?id=23 union select 1 from test.a...

Events Manager Wordpress Plugin 2.1 Blind SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================= - - Release date: May 10th, 2010 - - Discovered by: Danilo Massa - - Severity: High ============================================= I. VULNERABILITY - ------------------------- Events Manager Wordpress plugi...

Meto Forum 1.1 - Multiple SQL Injections

Meto Forum 1.1 - Multiple SQL Injections -------------------------------------------\ Meto Forum v1.1 Multiple Remote SQL Ä°injectin Vulnerable Script : http://www.aspindir.com/goster/5444 Risk : Forum in All users saved password is to take. Coded : Asp , SQL Language = 'Acces'...

Shader TV (Beta) - Multiple SQL Injections

Shader TV Beta Multiple Remote SQL Ä°njection Vulnerable Script : http://www.aspindir.com/indir.asp?ID=5441 Script : http://rapidshare.de/files/39341463/ShaderTV.zip.html Coded : Asp Lnguae : Acces Discovered By U238 | Friends : ka0x - TheBekiR - Marco Almeida - Erhan Bulut - Caborz : Web -...

Shader TV (Beta) Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== Shader TV Beta Multiple Remote SQL Injection Vulnerabilities ============================================================== Shader TV Beta Multiple Remote SQL Injection...

Unfixed XSS vulnerability at www.expression-web-designer-help.com

Security researcher THE-SH0CK-B0Y, has submitted on 04/07/2007 a cross-site-scripting XSS vulnerability affecting www.expression-web-designer-help.com, which at the time of submission ranked 316209 on the web according to Alexa. We manually validated and published a mirror of this vulnerability o...

Linux news 15.04.00

Corel выпустит Linux-версии CorelDraw и PhotoPaint раньше, чем планировалось Компания Corel активизировала разработку ПО для Linux и сообщила, что Linux-версии ее графических пакетов CorelDraw и PhotoPaint будут выпущены уже в июне, на два месяца раньше, чем ожидалось. Более того, недавняя покупк...