CVE-2008-1079

The outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile.NET uses hard-coded credentials for an FTP server, which allows remote attackers to gain privileges...

CVE-2008-1079

CVE-2008-1079 affects Beehive Software SendFile.NET. The outboxWriteUnsent function in FTPThread.class within SendFile.jar uses hard-coded credentials for an FTP server, allowing remote attackers to gain privileges. The provided documents do not specify a patch or workaround; exploitation details...

Beehive/SendFile.NET - Secure File Transfer Appliance Hardcoded Credentials

Title: Beehive/SendFile.NET - Secure File Transfer Appliance Hardcoded Credentials Vendor: Beehive Software Vendor URL: http://www.thebeehive.com/ Affected File: http://host/sfcommon/SendFile.jar Vendor Contact Date: 7/26/2007 Vendor Response: None Workaround: The simplest way to protect against...

Beehive/SendFile.NET - Secure File Transfer Appliance hardcoded credentials

There is hardcoded FTP account sfoutbox/sfoutbox...

Cross site scripting

Cross-site scripting XSS vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a "framework defined request parameter" when using WebLogic Workshop or Apache Beehive NetUI framework with...

CVE-2008-0869

Cross-site scripting XSS vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a "framework defined request parameter" when using WebLogic Workshop or Apache Beehive NetUI framework with...

CVE-2008-0869

Cross-site scripting XSS vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote attackers to inject arbitrary web script or HTML via a "framework defined request parameter" when using WebLogic Workshop or Apache Beehive NetUI framework with...

CVE-2008-0869

CVE-2008-0869 describes a cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 (SP6) and Workshop for WebLogic 9.0–10.0. The issue allows remote attackers to inject arbitrary web script/HTML via a "framework defined request parameter" when using WebLogic Workshop or Apache Beehiv...

Beehive论坛post.php脚本远程SQL注入漏洞

BUGTRAQ ID: 26492 CVECAN ID: CVE-2007-6014 Beehive Forum是用PHP编写的开源Web论坛应用。 Beehive Forum实现上存输入验证漏洞，远程攻击者可能利用此漏洞执行SQL注入攻击，非授权操作数据库获取敏感信息。 Beehive论坛的post.php脚本没有正确地过滤用户对tdedupe变量的输入便将该变量的值包含在了SQL语句中并由@mysqlquery函数执行。这个函数经过了特别的设计禁止在单个调用中使用多个SQL语句以缓解SQL注入攻击的影响，但攻击者仍可以通过tdedupe变量操控SQL语句，从数据库获得任意数据。...

Code injection

Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014...

CVE-2007-6241

Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014...

CVE-2007-6014

SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the tdedupe parameter...

Sql injection

SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the tdedupe parameter...

CVE-2007-6014

Beehive Forum 0.7.1 and earlier are affected by a SQL injection in post.php via the t_dedupe parameter. The vulnerability allows remote SQL commands to be executed and impacts Beehive Forum’s data. A patch/update has been released by the vendor (Beehive Forum 0.8), and the referenced recovery gui...

CVE-2007-6014

SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the tdedupe parameter...

CVE-2007-6241

Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014...

CVE-2007-6241

Beehive Forum 0.7.1 and earlier are affected by a SQL injection vulnerability in the post.php script, exploitable via the t_dedupe parameter to execute arbitrary SQL commands remotely. This is caused by insufficient input filtering in t_dedupe, allowing an attacker to manipulate SQL sent to the d...

SYMSA-2007-014: SQL Injection Vulnerability in Beehive Forum Software

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-014 Advisory Title: SQL Injection Vulnerability in Beehive Forum Software Author: Nick Bennett Robert Brown / [email protected] Release...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewmode, 2 fid, and 3 sortdir parameters, different vectors than CVE-2005-4460...

CVE-2007-3212

Multiple cross-site scripting XSS vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewmode, 2 fid, and 3 sortdir parameters, different vectors than CVE-2005-4460...