23 matches found
n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook
Impact The DELETE /$restEndpoint/test-webhook/:id route is registered before the authentication middleware is applied, allowing any unauthenticated network caller who knows a workflow ID to cancel that workflow's active test webhook registration. The impact is limited to disrupting in-progress te...
GHSA-H9FM-XCV2-QFW3 Duplicate Advisory: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-33q9-f52j-gc75. This link is maintained to preserve external references. Original Description n8n before 2.28.0 and before 2.27.4 on the 2.27.x branch registers the DELETE /$restEndpoint/test-webhook/:id endpoin...
Duplicate Advisory: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-33q9-f52j-gc75. This link is maintained to preserve external references. Original Description n8n before 2.28.0 and before 2.27.4 on the 2.27.x branch registers the DELETE /$restEndpoint/test-webhook/:id endpoin...
EUVD-2008-5928
Malware in sbrugna...
EUVD-2008-5929
Malware in sbrugna...
CVE-2008-5958
Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to 1 questions.asp, 2 importquestions.asp, and 3 quiztakers.asp...
CVE-2008-5959
Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 useremail parameter aka username field or 2 password parameter aka password field. NOTE: some of these details are obtained from third party information...
Sql injection
Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to 1 questions.asp, 2 importquestions.asp, and 3 quiztakers.asp...
Sql injection
Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 useremail parameter aka username field or 2 password parameter aka password field. NOTE: some of these details are obtained from third party information...
CVE-2008-5959
Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 useremail parameter aka username field or 2 password parameter aka password field. NOTE: some of these details are obtained from third party information...
CVE-2008-5958
Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to 1 questions.asp, 2 importquestions.asp, and 3 quiztakers.asp...
CVE-2008-5958
CVE-2008-5958 documents multiple SQL injection vulnerabilities in Active Test 2.1 . The issue arises when user-supplied input is passed via the QuizID parameter to three endpoints: questions.asp , importquestions.asp , and quiztakers.asp . Remote attackers can potentially execute arbitrary SQL co...
CVE-2008-5959
CVE-2008-5959 describes multiple SQL injection vulnerabilities in start.asp of Active Test 2.1. The issues allow remote attackers to execute arbitrary SQL commands through the (1) useremail (username) parameter or (2) password parameter. The description notes some details来自 third-party sources. T...
activetest21-sql.txt
----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:questions.asp QuizID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Test v 2.1 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...
Active Test 2.1 (Auth Bypass) Remote SQL Injection Vulnerability
No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Test v 2.1 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact:...
Active Test 2.1 - QuizID Blind SQL Injection
Active Test 2.1 - QuizID Blind SQL Injection ----------------------------بسم الله الرØمن الرØيم------------------------------ Tybe:questions.asp QuizID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Test v 2.1 author: Ñ3d D3v!L Date:...
Active Test 2.1 (QuizID) Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== Active Test 2.1 QuizID Blind SQL Injection Vulnerability ========================================================== Tybe:questions.asp QuizID Blind SQL Injection Vulnerability...
Active Test 2.1 - Authentication Bypass
Active Test 2.1 - Authentication Bypass ----------------------------بسم الله الرØمن الرØيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Test v 2.1 author: Ñ3d D3v!L Date: 28.11.2008 Home:...
Active Test 2.1 (Auth Bypass) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Active Test 2.1 Auth Bypass Remote SQL Injection Vulnerability ================================================================ Tybe:Auth Bypass Remote SQL Injection...
Active Test 2.1 (QuizID) Blind SQL Injection Vulnerability
No description provided by source. ----------------------------بسم الله الرØمن الرØيم------------------------------ Tybe:questions.asp QuizID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Test v 2.1 author: Ñ3d D3v!L Date: 28.11.2008 Home...