1213 matches found
PT-2013-5260
Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator versions 4.6.6 and earlier McAfee ePO Extension for the McAfee Agent versions 4.5 through 4.6 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including...
PT-2013-4747 · Atlassian · Crowd
Name of the Vulnerable Software and Affected Versions: Atlassian Crowd versions 2.3.8 Atlassian Crowd versions 2.4.9 Atlassian Crowd versions 2.5.x through 2.5.3 Atlassian Crowd versions 2.6.x through 2.6.2 Description: The issue allows remote attackers to read arbitrary files and send HTTP...
PT-2012-2191
Name of the Vulnerable Software and Affected Versions BrowserCRM versions 5.100.01 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the PATH INFO to several API endpoints, such as "index.php", "modules/admin/admin module...
PT-2012-2167
Name of the Vulnerable Software and Affected Versions Social Book Facebook Clone 2010 Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO parameter to several API endpoints, including "/signup.php", "/lostpass.php", "/login.php", "/index.php",...
PT-2012-1322
Name of the Vulnerable Software and Affected Versions SilverStripe versions 2.3.x through 2.3.9 SilverStripe versions 2.4.x through 2.4.3 Description The issue allows remote attackers to obtain version information due to insufficient access control. This is achieved via a direct request to API...
PT-2012-2088
Name of the Vulnerable Software and Affected Versions Blogs Manager versions 1.101 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands via the SearchField parameter in a search action to various API endpoints, including " authors list.php", " blogs list.php...
PT-2012-2068 · Gr Board · Gboard
Name of the Vulnerable Software and Affected Versions: GR Board aka grboard version 1.8.6.5 Community Edition Description: The issue allows remote attackers to modify or delete data without requiring authentication for certain database actions. This can be achieved by sending a request to specifi...
PT-2012-2996
Name of the Vulnerable Software and Affected Versions OpenEMR version 4.1.0 Description The issue allows remote authenticated users to read arbitrary files due to multiple directory traversal vulnerabilities. This is achieved by including a .. dot dot in the formname parameter to various API...
PT-2011-2778 · Cisco · Cisco Unified Operations Manager
Name of the Vulnerable Software and Affected Versions: Cisco Unified Operations Manager CUOM versions prior to 8.6 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the CCMs parameter to the "/iptm/PRTestCreation.do" API endpoint or the ccm...
PT-2007-2305 · Unknown · Trevorchan
Name of the Vulnerable Software and Affected Versions: Trevorchan versions 0.7 and earlier Description: A remote file inclusion issue allows remote attackers to execute arbitrary code via the tc configrootdir parameter to several API endpoints, including "upgrade.php", "paint save.php", "menu.php...
PT-2007-1990 · Unknown · Advanced Guestbook
Name of the Vulnerable Software and Affected Versions: Advanced Guestbook version 2.4.2 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include path parameter to API endpoints such as "index.php", "addentry.php", or "picture.php". Recommendations: For...
PT-2005-3149 · Dragonfly · Dragonfly Commerce
Name of the Vulnerable Software and Affected Versions: Dragonfly Commerce affected versions not specified Description: The issue allows remote attackers to change a product price by modifying the x DragonflyCartProductPrice hidden field in several API endpoints, including "dc Categorieslist.asp",...
