28 matches found
EUVD-2013-6786
Malware in sbrugna...
EUVD-2015-5569
Malware in sbrugna...
CVE-2010-4716
Cross-site scripting XSS vulnerability in the WebPublisher component in Novell GroupWise before 8.02HP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
SUSE CVE-2010-4716
Cross-site scripting XSS vulnerability in the WebPublisher component in Novell GroupWise before 8.02HP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-5617
SQL injection vulnerability in pub/mpendingnews/deletependingnews.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter...
Sql injection
SQL injection vulnerability in pub/mpendingnews/deletependingnews.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter...
CVE-2015-5617
CVE-2015-5617 describes a SQL injection in Enorth Webpublisher CMS via /pub/m_pending_news/delete_pending_news.jsp. The parameter cbNewsId is read and used in a SQL DELETE built by PendingNewsBean.deletePendingNews, concatenating IDs into an IN clause without sufficient validation. A remote attac...
CVE-2015-5617
SQL injection vulnerability in pub/mpendingnews/deletependingnews.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter...
PT-2020-7867
Name of the Vulnerable Software and Affected Versions: Enorth Webpublisher CMS affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter in the "pub/m pending news/delete pending news.jsp" endpoint. This enables...
CVE-2015-5617: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in pub/mpendingnews/deletependingnews.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter...
Enorth Webpublisher CMS SQL Injection from delete_pending_news.jsp
Title:CVE-2015-5617Enorth Webpublisher CMS SQL Injection from deletependingnews.jsp cbNewsidVendor:http://products.enorth.com.cn/bfnrglxt/index.shtmlEnorth Webpublisher CMS so far of the scale of tens of thousands of web sites, with the government, enterprises, scientific research and education a...
Enorth Webpublisher CMS SQL Injection Vulnerability
Enorth Webpublisher CMS suffers from a remote SQL injection vulnerability. Title: ==== CVE-2015-5617Enorth Webpublisher CMS SQL Injection from deletependingnews.jsp cbNewsid Vendor: ====== http://products.enorth.com.cn/bfnrglxt/index.shtml Enorth Webpublisher CMS so far of the scale of tens of...
Enorth Webpublisher CMS SQL Injection
Title: ==== CVE-2015-5617Enorth Webpublisher CMS SQL Injection from deletependingnews.jsp cbNewsid Vendor: ====== http://products.enorth.com.cn/bfnrglxt/index.shtml Enorth Webpublisher CMS so far of the scale of tens of thousands of web sites, with the government, enterprises, scientific research...
CVE-2013-6985
SQL injection vulnerability in mworklog/logsearchday.jsp in Enorth Webpublisher CMS, possibly 5.0 and earlier, allows remote attackers to execute arbitrary SQL commands via the thisday parameter...
Sql injection
SQL injection vulnerability in mworklog/logsearchday.jsp in Enorth Webpublisher CMS, possibly 5.0 and earlier, allows remote attackers to execute arbitrary SQL commands via the thisday parameter...
CVE-2013-6985
SQL injection vulnerability in mworklog/logsearchday.jsp in Enorth Webpublisher CMS, possibly 5.0 and earlier, allows remote attackers to execute arbitrary SQL commands via the thisday parameter...
CVE-2013-6985
CVE-2013-6985 affects Enorth Webpublisher CMS, specifically the m_worklog/log_searchday.jsp component. The vulnerability is a SQL injection in the thisday parameter, potentially affecting version 5.0 and earlier, allowing remote attackers to execute arbitrary SQL commands. Exploit details show a ...
PT-2013-6220
Name of the Vulnerable Software and Affected Versions Enorth Webpublisher CMS versions 5.0 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the thisday parameter in the m worklog/log searchday.jsp file. Recommendations For Enorth...
CVE-2013-6985: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in mworklog/logsearchday.jsp in Enorth Webpublisher CMS, possibly 5.0 and earlier, allows remote attackers to execute arbitrary SQL commands via the thisday parameter...
Enorth Webpublisher CMS SQL Injection Vulnerability
Enorth Webpublisher CMS suffers from a remote SQL injection vulnerability. Title: ==== CVE-2013-6985SQL Injection Vulnerability In Enorth Webpublisher CMS Vendor: ====== http://products.enorth.com.cn/bfnrglxt/index.shtml Severity: ======= Important Versions Affected: ============== All versions...