3456 matches found
EML Enterprise Address Book Management System 4.3.1 SQL Injection Vulnerability in Kewords Parameters
EML enterprise customer relationship management system , is based on Linux open kernel and Apache based Php + Mysql intelligent B / S interactive service system . EML enterprise address book management system 4.3.1 Kewords parameter SQL injection vulnerability. The vulnerability stems from the la...
SQL Injection Vulnerability in eml Enterprise Address Book Management System Version 4.3
EML enterprise customer relationship management system , is based on Linux open kernel and Apache based Php + Mysql intelligent B / S interactive service system . EML Enterprise Contacts Management System v4.3 version of the SQL injection vulnerability. Attackers can use this vulnerability to...
thunderbird security update
CentOS Errata and Security Advisory CESA-2017:1561 An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
RedHat Update for firefox RHSA-2017:1440-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Roundcube Webmail Information Disclosure Vulnerability (CNVD-2017-08083)
RoundCube Webmail is a browser-based IMAP client mail client that supports address book management, message searching, spell checking and more. An information disclosure vulnerability exists in the program/steps/addressbook/photo.inc file in Roundcube Webmail versions prior to 1.0.6 and 1.1.x...
CVE-2017-2497
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows remote attackers to trigger visits to arbitrary URLs via a crafted book...
PlaySMs Remote Code Execution Vulnerability (CNVD-2017-10344)
PlaySMS is an open source WEB SMS platform. A remote code execution vulnerability exists in PlaySms. The vulnerability stems from the address book calling a function in import.php. An attacker can exploit the vulnerability to execute malicious code...
EML enterprise address book management system username parameter has SQL injection vulnerability
EML enterprise address book management system to the enterprise employees at any time, any place to provide enterprise address book information, can be in the cell phone real-time view of the staff contact information, dialing the phone and so on. The EML enterprise address book management system...
WordPress EELV Newsletter 4.5 XSS / CSRF Vulnerabilities
Exploit for php platform in category web applications Document Title: =============== Wordpress EELV Newsletter v4.5 - Multiple Vulnerabilities Product & Service Introduction: =============================== Add a registration form on FrontOffice, a newsletter manager on backoffice manage skins,...
Number book : real & caller ID - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Number book : real & caller ID published at the 'play' market has multiple vulnerabilities...
نمبربوك السعودي - Number Book - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application نمبربوك السعودي - Number Book published at the 'play' market has multiple vulnerabilities...
Nextcloud Server Information Disclosure Vulnerability (CNVD-2017-07533)
Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany.Nextcloud Server is one of the server version. An information disclosure vulnerability exists in Nextcloud Server versions prior to 10.0.4 and versions prior to 11.0....
Latest Book Inducted into Cybersecurity Canon
Thursday evening Mrs B and I were pleased to attend an awards seminar for the Cybersecurity Canon. This is a project sponsored by Palo Alto Networks and led by Rick Howard. The goal is "identify a list of must-read books for all cybersecurity practitioners." Rick reviewed my fourth book The...
indianrailways.gov.in XSS vulnerability
Vulnerable URL: http://www.indianrailways.gov.in/9E-book/E-book-03/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS...
SQL injection vulnerability in keyword parameter of xycms manage_book.php page
XYCMS was formerly known as Nanjing XYCMS Enterprise Building System. A SQL injection vulnerability exists in the keyword parameter of the xycms managebook.php page. The vulnerability stems from the failure to filter the keyword parameter sufficiently, which can be exploited by an attacker to...
Book access - Critical - Unsupported - SA-CONTRIB-2017-35
This module alters the book module permissions model by letting you specify access/modify/delete rights on a per-book basis. Normally, book-related permissions provided by drupal core apply across all books, but this module will let you drill down as granular as to letting specific users have...
napier.ac.uk XSS vulnerability
Vulnerable URL: http://www.napier.ac.uk/research-and-innovation/our-experts?q=Emmotional+intelligence=D6705B99CAD14C8F9D206EF0FB9B53ABScottish+Centre+for+the+Book|42F5C5EF5B9F4EC598399D49B4FD0ADAYes%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No...
Open-Xchange: Resend invitation to members by Read only user(Privilege Escalation)
Hi Team, Description : ViewerRead only user of any entityEx: Address book, Folder etc. doesn't have access to permission section. This user can't make any action in permission/Invite people section. But Resending invitation HTTP request is vulnerable and it doesn't check whether the user is Owner...
