712 matches found
CVE-2016-6080
The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker...
Directory traversal
The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker...
CVE-2016-6080
CVE-2016-6080 affects WebSphere Message Broker (WebAdmin) on WebSphere Message Broker v8. The vulnerability allows directory listings via the WebAdmin context, potentially disclosing sensitive information. IBM’s security bulletin confirms the issue and provides a remediation: apply APAR IT16698 i...
CVE-2016-6080
The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker...
PT-2017-8881
Name of the Vulnerable Software and Affected Versions WebSphere Message Broker affected versions not specified Description The issue allows directory listings in the WebAdmin context, potentially disclosing sensitive information to attackers. Recommendations At the moment, there is no information...
CVE-2016-6080: Exposure of Sensitive Information to an Unauthorized Actor
The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker...
IBM WebSphere Message Broker Information Disclosure Vulnerability (CNVD-2016-11964)
IBM WebSphere Message Broker now known as IBM Integration Bus is an enterprise service bus ESB product from IBM, USA. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. A security vulnerability exists in...
GE Healthcare Centricity Image Vault Trust Management Vulnerability
GE Healthcare Centricity Image Vault is a library of Vivid cardiovascular ultrasound images from General Electric GE for the healthcare industry. A security vulnerability exists in GE Healthcare Centricity Image Vault version 3.x, which stems from the use of 'gemnet' as password for the...
CVE-2004-2777: Undefined Security Weakness
GE Healthcare Centricity Image Vault 3.x has a password of 1 gemnet for the administrator account, 2 webadmin for the webadmin administrator account of the ASACA DVD library, 3 an empty value for the gemsservice account of the Ultrasound Database, and possibly 4 gemnet2002 for the gemnet2002...
PT-2015-3460
Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity Image Vault versions 3.x Description The issue concerns hardcoded or default passwords for various accounts in the system. Specifically, the passwords are: gemnet for the administrator account, webadmin for the webadmi...
CodeMeter < 5.20 Local Privilege Escalation Vulnerability
According to its self-reported version, the CodeMeter WebAdmin server installed on the remote host is prior to 5.20a 5.20.1458.500. It is affected by insecure read/write permissions for the 'codemeter.exe' service, which a local attacker can exploit to gain elevated privileges via a trojan horse...
AltN WebAdmin USER Buffer Overflow - Ver2 (CVE-2003-0471)
A buffer overflow vulnerability has been reported in Alt-N Webadmin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
alt-n webadmin 3.0.2 - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12395/info Alt-n WebAdmin is reportedly affected by multiple remote vulnerabilities. The application is affected by multiple cross-site scripting issues. An attacker may leverage these issues to execute arbitrary HTML and...
HP LaserJet Pro P1606dn - Webadmin Password Reset
No description provided by source. !/usr/bin/python Exploit Title: HP LaserJet Pro P1606dn Webadmin password reset Date: 20.05.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://www8.hp.com/de/de/products/printers/product-detail.html?oid=4110411 Firmware...
crownweb (page.cfm) SQL Injection Vulnerability
No description provided by source. crownweb page.cfm Sql Injection Vulnerability =================================================================== .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : crownweb .:. Language : Cfm .:. Script Download:...
MDaemon WebAdmin 2.0.x - SQL injection
No description provided by source. Exploit Title: MDaemon WebAdmin 2.0.X SQL injection Date: 2006/5/26 Author: KOUSULIN Software Link: http://archive.altn.com/WebAdmin/Archive/2.0.8/wa208en.exe Version: WebAdmin 2.0.X Tested on: Windows 2003 CVE : N/A Code : /WebAdmin.dll?Session='ACCESS SQL...
Alt-N WebAdmin 2.0.x Remote File Viewing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7438/info Alt-N WebAdmin allows a remote user to access files that they should not be able to access. The remote user can submit an HTTP request that will return the contents of any webserver-readable file on the system...
Alt-N WebAdmin 2.0.x Remote File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7439/info Reportedly, remote users can discover the installation directory of certain software on the underlying system by submitting an HTTP request to the WebAdmin server. This could allow an attacker to obtain sensitiv...
VamCart 0.9 - CSRF Vulnerability
No description provided by source. Exploit Title: VamCart v0.9 CSRF Vulnerability Date: 20/08/2012 Author: DaOne Software Link: http://vamcart.googlecode.com/files/vamcart.zip Greetings to: LCA CSRF Add Admin: html body onload=document.form0.submit; form method=POST name=form0...
@Mail 4.0/4.13 Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/14408/info @Mail is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...