n8n: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook

Impact The DELETE /$restEndpoint/test-webhook/:id route is registered before the authentication middleware is applied, allowing any unauthenticated network caller who knows a workflow ID to cancel that workflow's active test webhook registration. The impact is limited to disrupting in-progress te...

GHSA-H9FM-XCV2-QFW3 Duplicate Advisory: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-33q9-f52j-gc75. This link is maintained to preserve external references. Original Description n8n before 2.28.0 and before 2.27.4 on the 2.27.x branch registers the DELETE /$restEndpoint/test-webhook/:id endpoin...

Duplicate Advisory: Unauthenticated Endpoint Allows Cancellation of Any User's Active Test Webhook

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-33q9-f52j-gc75. This link is maintained to preserve external references. Original Description n8n before 2.28.0 and before 2.27.4 on the 2.27.x branch registers the DELETE /$restEndpoint/test-webhook/:id endpoin...

EUVD-2008-5928

Malware in sbrugna...

EUVD-2008-5929

Malware in sbrugna...

CVE-2008-5958

Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to 1 questions.asp, 2 importquestions.asp, and 3 quiztakers.asp...

CVE-2008-5959

Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 useremail parameter aka username field or 2 password parameter aka password field. NOTE: some of these details are obtained from third party information...

Sql injection

Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to 1 questions.asp, 2 importquestions.asp, and 3 quiztakers.asp...

Sql injection

Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 useremail parameter aka username field or 2 password parameter aka password field. NOTE: some of these details are obtained from third party information...

CVE-2008-5959

Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 useremail parameter aka username field or 2 password parameter aka password field. NOTE: some of these details are obtained from third party information...

CVE-2008-5958

Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to 1 questions.asp, 2 importquestions.asp, and 3 quiztakers.asp...

CVE-2008-5958

CVE-2008-5958 documents multiple SQL injection vulnerabilities in Active Test 2.1 . The issue arises when user-supplied input is passed via the QuizID parameter to three endpoints: questions.asp , importquestions.asp , and quiztakers.asp . Remote attackers can potentially execute arbitrary SQL co...

CVE-2008-5959

CVE-2008-5959 describes multiple SQL injection vulnerabilities in start.asp of Active Test 2.1. The issues allow remote attackers to execute arbitrary SQL commands through the (1) useremail (username) parameter or (2) password parameter. The description notes some details来自 third-party sources. T...

CVE-2008-5959: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 useremail parameter aka username field or 2 password parameter aka password field. NOTE: some of these details are obtained from third party information...

CVE-2008-5958: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to 1 questions.asp, 2 importquestions.asp, and 3 quiztakers.asp...

activetest21-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:questions.asp QuizID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Test v 2.1 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Active Test 2.1 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Test v 2.1 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact:...

Active Test 2.1 - QuizID Blind SQL Injection

Active Test 2.1 - QuizID Blind SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:questions.asp QuizID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Test v 2.1 author: я3d D3v!L Date:...

Active Test 2.1 (QuizID) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Active Test 2.1 QuizID Blind SQL Injection Vulnerability ========================================================== Tybe:questions.asp QuizID Blind SQL Injection Vulnerability...

Active Test 2.1 - Authentication Bypass

Active Test 2.1 - Authentication Bypass ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Test v 2.1 author: я3d D3v!L Date: 28.11.2008 Home:...