Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

Multiple vulnerabilities exist in the wzdftpd-back-pgsql package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Coremail官网SQL注入可读全库

简要描述： coremail官网存在注入，有防护，可绕过。 详细说明： 漏洞地址：http://www.coremail.cn/gjzc2/list117.aspx?lcid=412 漏洞证明： 有防护，直接用sqlmap加个tamper=chardoubleencode.py可以跑出来。 这个是sqlmap用的payload： Place: GET Parameter: lcid Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: lcid=412 AND...

Unspecified Vulnerability in Oracle Retail Applications Retail Back Office Component

Oracle Retail Applications is a retail application store solution. A security vulnerability exists in the Oracle Retail Back Office component of Oracle Retail Applications, which can be exploited by remote attackers to compromise system integrity...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors...

CVE-2015-0466

Oracle Retail Applications’ Retail Back Office component (versions 12.0, 12.0IN, 13.0–13.4, 14.0–14.1) contains an unspecified vulnerability that allows remote attackers to affect integrity via unknown vectors. Root cause and exploit details are not provided in the connected documents; the NVD en...

CVE-2015-0466

Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors...

CVE-2015-0466: Undefined Security Weakness

Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 allows remote attackers to affect integrity via unknown vectors...

Pragyan CMS SQL Injection Vulnerability

Pragyan CMS is prone to an SQL injection vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : glibc (ALAS-2015-495)

An out-of-bounds read flaw was found in the way glibc's iconv function converted certain encoded data to UTF-8. An attacker able to make an application call the iconv function with a specially crafted argument could use this flaw to crash that application. CVE-2014-6040 It was found that the file...

IBM Rational ClearQuest 7.1.1.x < 7.1.1.4 / 7.1.2.x < 7.1.2.1 Multiple Vulnerabilities (credentialed check)

The remote host is running a version of IBM Rational ClearQuest 7.1.1.x prior to 7.1.1.4 / 7.1.2.x prior to 7.1.2.1 installed. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists in the Dojo Toolkit that allows a remote attacker to read...

WordPress Survey and Poll Blind SQL Injection Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

Suning a backstage bypass arbitrary file upload-vulnerability warning-the black bar safety net

http://58.213.19.68/users/signin Suning Plaza phone the client back-end management system http://58.213.19.68/users/signup you can register for an account Then login ! Snip2015010713. png Point into the background is not entitled to limit access, but the system using rb to develop The error...

CVE-2015-1435

Cross-site scripting XSS vulnerability in my little forum before 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the back parameter to index.php...

CVE-2015-1435: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in my little forum before 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the back parameter to index.php...

PT-2015-5286

Name of the Vulnerable Software and Affected Versions my little forum versions prior to 2.3.4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the back parameter to "index.php". Recommendations For versions prior to 2.3.4, update to...

Directory traversal in the back end

Date : 2015-02-12 CVE ID : CVE-2015-0269 Description Arnaud Buchoux with Orange Consulting has discovered a directory traversal vulnerability, which allows logged in back end users to view files outside their file mounts or the document root. It is, however, not possible to edit these files or to...

my little forum '/index.php' cross-site scripting vulnerability

my little forum is a forum program. A cross-site scripting vulnerability exists in my little forum. The input passed to "/index.php" via the "back" GET parameter is not properly filtered before being used by the user. This allows remote attackers to trick a logged in user into opening a specially...

ZeroCMS Multiple SQL Injection Vulnerabilities (Feb 2015)

ZeroCMS is prone to multiple sql injection vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Panasonic Arbitrator Back-End Server (BES) Information Disclosure Vulnerability

Panasonic Arbitrator is a surveillance camera application. A security vulnerability exists in the Panasonic Arbitrator 'Back-End' Server, which could be exploited by an attacker to obtain sensitive information...

Directory traversal

Panasonic Arbitrator Back-End Server BES MK 2.0 VPU before 9.3.1 build 4.08.003.0, when USB Wi-Fi or Direct LAN is enabled, and MK 3.0 VPU before 9.3.1 build 5.06.000.0, when Embedded Wi-Fi or Direct LAN is enabled, does not use encryption, which allows remote attackers to obtain sensitive...