JVN#03050861: EXPRESSCLUSTER X vulnerable to directory traversal

EXPRESSCLUSTER X from NEC Corporation is software to provide high availability HA clustering. EXPRESSCLUSTER X contains an issue in WebManager, which may lead to directory traversal. Impact Arbitrary files on the server may be viewed by an attacker who can access to the WebManager. Solution Updat...

Spectrum Software WebManager CMS 'pojam' Parameter Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38573/info Spectrum Software WebManager CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Galatolo Web Manager <= 1.0 - Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Portal : Galatolo WebManager 1.0 exploit aported password crypted exploit tatjibe password mcrypté :d mgharba :d:d:d:d Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & Simo64 & iuoisn & All muslims...

CVE-2010-4900

Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

CVE-2010-4899

SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Open redirect

Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

Sql injection

SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4899

SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4900

Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

CVE-2010-4900

CVE-2010-4900 is an open redirect vulnerability in CMS WebManager-Pro prior to or including version 8.1, exploitable via a URL supplied in the url parameter of c.php. The underlying issue allows remote attackers to redirect users to arbitrary sites, enabling phishing-style redirection. The connec...

CVE-2010-4899

CVE-2010-4899 describes a SQL injection vulnerability in CMS WebManager-Pro via the id parameter in c.php, affecting versions before 8.1. The issue permits remote attackers to execute arbitrary SQL commands, enabling potential data disclosure or modification. Public references corroborate the SQL...

CVE-2010-4900: Improper Input Validation

Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

CVE-2010-4899: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-1834

Name of the Vulnerable Software and Affected Versions CMS WebManager-Pro versions prior to 8.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the c.php file. Recommendations For versions prior to 8.1, update to version 8.1...

PT-2011-1835

Name of the Vulnerable Software and Affected Versions CMS WebManager-Pro versions 8.1 and earlier Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. This can be exploited by providing a malicious URL,...

IAA и XSS уязвимости в CMS WebManager-Pro

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в CMS WebManager-Pro. Это украинская коммерческая CMS. Insufficient Anti-automation WASC-21: На странице контактов http://site/index.php?menuid=x нет защиты от автоматизированных...

CMS WebManager-Pro 7.4.3 Cross Site Scripting

Hello list! I want to warn you about Insufficient Anti-automation and Cross-Site Scripting vulnerabilities in CMS WebManager-Pro. It's Ukrainian commercial CMS. Earlier I already told about interesting RCE vulnerability in this CMS, which I mentioned about last month in article Placing shells...

CMS WebManager-Pro 7.4.3 Code Execution / Cross Site Request Forgery

Hello list! I want to warn you about Remote Code Execution and Cross-Site Request Forgery vulnerabilities in CMS WebManager-Pro. This CMS is widely using at different web sites, including security and government sites. ------------------------- Affected products: -------------------------...

RCE и CSRF уязвимости в CMS WebManager-Pro

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Remote Code Execution и Cross-Site Request Forgery уязвимостях в CMS WebManager-Pro это украинская коммерческая CMS. RCE Remote PHP Code Execution WASC-31: В системе возможно включение php тэгов непосредственно в поля для текста контента. Таким...

CMS WebManager-Pro Cross Site Scripting / SQL Injection

Hello Bugtraq! I want to warn you about Cross-Site Scripting and SQL Injection vulnerabilities in CMS WebManager-Pro. It's Ukrainian commercial CMS. ------------------------- Affected products: ------------------------- Vulnerable are CMS WebManager-Pro v.7.4.3 version from FGSStudio and previous...