netStartEnterprise 4.0 - SQL Injection

======================================= netStartEnterprise v4.0 SQL Injection Vulnerability ======================================= Exploit Title: netStartEnterprise v4.0 SQL Injection Vulnerability Author: L1nK Mail: [email protected] Date: 07/23/2010 Tested on: Windows, Linux, Mac...

Sports Accelerator Suite 2.0 SQL Injection

Sports Accelerator Suite v2.0 newsid Remote SQL Injection Vulnerability Vendor: Athlete Web Services, Inc. / AWS Sports Product Web Page: http://www.athletewebservices.com Summary: Content Management System PHP+MySQL. Description: The CMS is vulnerable to an SQL Injection attack when input is...

Sports Accelerator Suite 2.0 - news_id SQL Injection

Sports Accelerator Suite 2.0 - newsid SQL Injection Sports Accelerator Suite v2.0 newsid Remote SQL Injection Vulnerability Vendor: Athlete Web Services, Inc. / AWS Sports Product Web Page: http://www.athletewebservices.com Summary: Content Management System PHP+MySQL. Description: The CMS is...

Sports Accelerator Suite 2.0 - 'news_id' SQL Injection

Sports Accelerator Suite v2.0 newsid Remote SQL Injection Vulnerability Vendor: Athlete Web Services, Inc. / AWS Sports Product Web Page: http://www.athletewebservices.com Summary: Content Management System PHP+MySQL. Description: The CMS is vulnerable to an SQL Injection attack when input is...

Sports Accelerator Suite v2.0 (news_id) SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================================== Sports Accelerator Suite v2.0 newsid SQL Injection Vulnerability =================================================================== Vendor: Athlete Web Services, Inc. / AWS...

Sports Accelerator Suite v2.0 (news_id) Remote SQL Injection Vulnerability

Summary Content Management System PHP+MySQL. Description The CMS is vulnerable to an SQL Injection attack when input is passed to the "newsid" parameter. The script fails to properly sanitize the input before being returned to the user allowing the attacker to compromise the entire DB system and...

netStartEnterprise v4.0 SQL Injection Vulnerability

Exploit for asp platform in category web applications =================================================== netStartEnterprise v4.0 SQL Injection Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Scientists Want to Track Attacks Via Web Services

Developers could build a framework that could maintain transactional records among web services in order to recreate the scene of the crime in the aftermath of a cyber attack, scientists from the National Institute of Standards and Technology suggest in a new study. Read the full article...

Apache Axis Session Fixation Vulnerability

===== Tempest Security Intelligence - Advisory 02 / 2010 =========== Vulnerability = 'Apache Axis Session Fixation Vulnerability' Authors = 'Tiago Ferreira tiago SPAM tempest.com.br' 'Leandro Oliveira leandro SPAM tempest.com.br' ======== Table of Contents...

Openwsman HTTP Basic Authentication Buffer Overflow (CVE-2008-2234)

Openwsman is an implementation of Web Services Management WS-Management specification. It uses the WS-Management protocol, which is a SOAP-based protocol using HTTP for exchange of information related to management of devices and applications in a platform independent manner. There exists a stack...

Apache Axis2 Detection

The remote web server hosts Apache Axis2, an open source web services engine. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46739; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Apache Axis2...

Apache Axis2 Administration Console - (Authenticated) Cross-Site Scripting

PR10-03 Authenticated Cross-Site Scripting Vulnerability XSS within Apache Axis2 administration console Source: http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-03 Advisory publicly released: Friday, 21 May 2010 Vulnerability found: Saturday, 30 January 2010 Severity level:...

Fedora Update for php-ZendFramework FEDORA-2010-8495

Check for the Version of php-ZendFramework OpenVAS Vulnerability Test Fedora Update for php-ZendFramework FEDORA-2010-8495 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

[SECURITY] Fedora 11 Update: php-ZendFramework-1.10.4-1.fc11

Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile codebase. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and consumi...

Mac OS X Server Web Services Version Detection

The remote host is running Mac OS X Server Web Services, a set of services for handling remote web services such as a wiki and a calendar. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45439; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Ma...

Apple Mac OS X Wiki Server File Upload Security Bypass

The remote Mac OS X Server Web Services installation contains a version of the Wiki Server component that is affected by a security bypass vulnerability due to allowing users to upload active content such as Java applets. A remote attacker can exploit this flaw to compromise the systems of...

Code injection

Unspecified vulnerability in the single sign-on functionality in the Web Services implementation in IBM DB2 Content Manager CM Toolkit 8.3 before FP13 on z/OS and DB2 Information Integrator for Content 8.3 before FP13 has unknown impact and remote attack vectors...

TT Web Site Manager Version Detection

This script finds the running TT web site manager version. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla SOAPParameter Integer Overflow (CVE-2004-0722)

Simple Object Access Protocol SOAP is an XML based protocol which allows for an easy exchange of information over the Internet. It is commonly used for building web services. Mozilla has built-in SOAP support, provided through a JavaScript interface for a series of objects designed to create, sen...

Fedora Update for php-ZendFramework FEDORA-2010-0652

Check for the Version of php-ZendFramework OpenVAS Vulnerability Test Fedora Update for php-ZendFramework FEDORA-2010-0652 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...