9290 matches found
SQL Buddy 1.3.3 (GET/POST) Multiple Remote Cross-Site Scripting Vulnerabilities
Summary SQL Buddy is an open source web based MySQL administration application. Description SQL Buddy suffers from a XSS vulnerability when parsing user input to the 'DATABASE', 'HOST' and 'USER' parameters via POST method in 'login.php', and the 'db' parameter in 'dboverview.php' via GET method...
[SECURITY] Fedora 16 Update: phpldapadmin-1.2.2-1.fc16
PhpLDAPadmin is a web-based LDAP client. It provides easy, anywhere-accessible, multi-language administration for your LDAP server. Its hierarchical tree-viewer and advanced search functionality make it intuitive to browse and administer your LDAP director y. Since it is a web application, this...
[SECURITY] Fedora 15 Update: phpldapadmin-1.2.2-1.fc15
PhpLDAPadmin is a web-based LDAP client. It provides easy, anywhere-accessible, multi-language administration for your LDAP server. Its hierarchical tree-viewer and advanced search functionality make it intuitive to browse and administer your LDAP director y. Since it is a web application, this...
Android.Bmaster Exploits root access to connect to Botnet
Android.Bmaster Exploits root access to connect to Botnet A new piece of Android malware named Android.Bmaster, first highlighted by researcher Xuxian Jiang at North Carolina State University, was uncovered on a third-party marketplace and is bundled with a legitimate application for configuring...
CVE-2011-5078
CVE-2011-5078 affects Sybase M-Business Anywhere 6.7 before ESD#3 and 7.0 before ESD#7. The web administration interface does not require admin authentication for unspecified scripts, enabling remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP...
PT-2012-2056
Name of the Vulnerable Software and Affected Versions Sybase M-Business Anywhere versions 6.7 through 6.7 before ESD 3 Sybase M-Business Anywhere versions 7.0 through 7.0 before ESD 7 Description The web administration interface in the server does not require admin authentication for certain...
Oracle GlassFish Server 3.1.1 < 3.1.1.2 Administration Component Unspecified Vulnerability
The version of GlassFish Server running on the remote host is affected by an unspecified vulnerability related to the Administration component that allows local users to affect confidentiality, integrity, and availability in some way. C Tenable Network Security, Inc. include"compat.inc"; if...
Oracle GlassFish Server 3.0.1 / 3.1.1 < 3.0.1.5 / 3.1.1.3 Administration Component Unspecified Vulnerability
The version of GlassFish Server running on the remote host is affected by an unspecified vulnerability related to the Web Container component that allows local users to affect availability in some way. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57805;...
Oracle GlassFish Server 2.1.1 < 2.1.1 Patch15 Administration Component Unspecified Vulnerability
The version of GlassFish Server running on the remote host is affected by an unspecified vulnerability related to the Administration component that allows local users to affect confidentiality in some way. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57803;...
FAA US Academy (AFS) - Auth Bypass Vulnerability
Document Title: =============== FAA US Academy AFS - Auth Bypass Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=171 Release Date: ============= 2012-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 171 Common...
HP Managed Printing Administration jobDelivery Script Directory Traversal (intrusive check)
The HP Managed Printing Administration install on the remote web server is affected by a directory traversal vulnerability in the 'Default.asp' script. A remote, unauthenticated attacker, exploiting this flaw, could create arbitrary files on the remote host. Note that the HP Managed Printing...
HP Managed Printing Administration < 2.6.4 Multiple Vulnerabilities
The remote web server is hosting a version of HP Managed Printing Administration earlier than 2.6.4. As such, it is potentially affected by the following vulnerabilities : - Multiple directory traversal, arbitrary file-deletion, and file-creation vulnerabilities affect the...
HP Managed Printing Administration Detection
HP Managed Printing Administration, a web-based printer administration interface, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57699; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"HP Managed Printing...
Oracle GlassFish Server Multiple Unspecified Vulnerabilities
The host is running GlassFish Server and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gboracleglassfishservermultunspecifiedvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ Oracle GlassFish Server Multiple Unspecified Vulnerabilities Authors: Antu Sanadi Copyright...
JVN#54779201: Oracle WebLogic Server vulnerable to cross-site scripting
Oracle WebLogic Server contains a cross-site scripting vulnerability on the management console. Impact An arbitrary script may be executed on the browser of the user who is logged into the administration console of Oracle WebLogic Server. Solution Update the Software Apply the latest update...
Cisco Digital Media Manager privilege escalation
It's possible to access administration pages by URLs...
CVE-2012-0088
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Benefits Administration...
CVE-2012-0081
Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.1.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Administration...