52 matches found
Information disclosure
The Bed and Breakfast aka com.wbedandbreakfastapp application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7524
The Bed and Breakfast Android app (package com.wbedandbreakfastapp, version 0.1) is vulnerable because it does not verify X.509 certificates when establishing SSL/TLS connections. This allows a man-in-the-middle to spoof servers and potentially exfiltrate sensitive data via a crafted certificate....
CVE-2014-7524
The Bed and Breakfast aka com.wbedandbreakfastapp application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Specialist Bed and Breakfast Website SQL Injection Vulnerability
No description provided by source. Exploit Title: Specialist Bed and Breakfast website SQL injection Vulnerability Date: 30/06/2010 Author: JaMbA Script url: http://www.internetdm.co.uk/site/pages.php?fid=0,1,356 Version: N/A Tested on: Windows CVE : :::::::::::::::::::::::::...
Cyber Intelligence Asia 2014: CERTs and Industrial Security
In March I spoke at Cyber Intelligence Asia 2014, where CERTs from most Asians countries were presented. The fact is that only a few CERTs are now dealing in some way with industrial security, ICS and SCADA matters. One of the best of those is CERT of Japan, which is doing a great job here, and...
CVE-2011-5173
Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in the title field in a bed file...
Sql injection
SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute arbitrary SQL commands via the ppid parameter...
CVE-2010-2623
SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute arbitrary SQL commands via the ppid parameter...
CVE-2010-2623
CVE-2010-2623 documents an SQL injection in pages.php of Internet DM Specialist Bed and Breakfast. The flaw allows remote attackers to inject arbitrary SQL via the pp_id parameter, potentially compromising data confidentiality, integrity, and availability (per CVSS 2.0: AV:N/AC:L/Au:N/C:P/I:P/A:P...
Specialist Bed And Breakfast SQL Injection
Exploit Title: Specialist Bed and Breakfast website SQL injection Vulnerability Date: 30/06/2010 Author: JaMbA Script url: http://www.internetdm.co.uk/site/pages.php?fid=0,1,356 Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: ::::::::::::::::::::::::: =================Exploit=====...
Specialist Bed and Breakfast Website - SQL Injection
Specialist Bed and Breakfast Website - SQL Injection Exploit Title: Specialist Bed and Breakfast website SQL injection Vulnerability Date: 30/06/2010 Author: JaMbA Script url: http://www.internetdm.co.uk/site/pages.php?fid=0,1,356 Version: N/A Tested on: Windows CVE : :::::::::::::::::::::::::...
Specialist Bed and Breakfast Website - SQL Injection
Exploit Title: Specialist Bed and Breakfast website SQL injection Vulnerability Date: 30/06/2010 Author: JaMbA Script url: http://www.internetdm.co.uk/site/pages.php?fid=0,1,356 Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: ::::::::::::::::::::::::: =================Exploit=====...