23 matches found
EUVD-2011-1348
Malware in sbrugna...
EUVD-2011-1349
Malware in sbrugna...
EUVD-2010-3902
Malware in sbrugna...
CVE-2011-1341
Cross-site request forgery CSRF vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows remote attackers to hijack the authentication of administrators for requests that modify data...
CVE-2011-1342
SQL injection vulnerability in Aimluck Aipo before 5.1.1, and Aipo for ASP before 5.1.1, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-1341
Cross-site request forgery CSRF vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows remote attackers to hijack the authentication of administrators for requests that modify data...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows remote attackers to hijack the authentication of administrators for requests that modify data...
Sql injection
SQL injection vulnerability in Aimluck Aipo before 5.1.1, and Aipo for ASP before 5.1.1, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-1341
CVE-2011-1341 describes a CSRF vulnerability in Aimluck Aipo before 4.0.4.0 and Aipo for ASP before 4.0.4.0, enabling remote attackers to hijack administrators’ authenticated sessions to perform data-modifying requests. Affected versions: Aipo and Aipo for ASP prior to 4.0.4.0. Root cause: CSRF i...
CVE-2011-1342
CVE-2011-1342 affects Aimluck Aipo before 5.1.1 and Aipo for ASP before 5.1.1, where a SQL injection vulnerability allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. References in JVN/JVNDB and Red Hat/NVD confirm the issue and indicate the fix: upgrade t...
CVE-2011-1342
SQL injection vulnerability in Aimluck Aipo before 5.1.1, and Aipo for ASP before 5.1.1, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-1341
Cross-site request forgery CSRF vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows remote attackers to hijack the authentication of administrators for requests that modify data...
PT-2011-3073
Name of the Vulnerable Software and Affected Versions Aimluck Aipo versions prior to 5.1.1 Aipo for ASP versions prior to 5.1.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Aimluck Aipo versions prior to 5.1.1, update to version...
CVE-2011-1342: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Aimluck Aipo before 5.1.1, and Aipo for ASP before 5.1.1, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-1341: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Aimluck Aipo before 4.0.4.0, and Aipo for ASP before 4.0.4.0, allows remote attackers to hijack the authentication of administrators for requests that modify data...
PT-2011-3072
Name of the Vulnerable Software and Affected Versions Aimluck Aipo versions prior to 4.0.4.0 Aipo for ASP versions prior to 4.0.4.0 Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to hijack the authentication of administrators for...
Aipo vulnerable to cross-site request forgery
Overview Aipo contains a cross-site request forgery vulnerability. Aipo from Aimluck, Inc. is groupware including functions such as scheduler and intra-office blogging. Aipo contains a cross-site request forgery vulnerability. Masako Ohno reported this vulnerability to IPA. JPCERT/CC coordinated...
CVE-2010-3924
SQL injection vulnerability in Aimluck Aipo before 5.1.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...