bigband-bw.de XSS vulnerability

Vulnerable URL: http://www.bigband-bw.de/index.php?gotarget=suchergebnis=%22%3E%3CsvG%2Fonload%3Dalert%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6159848...

bw-krefeld.de XSS vulnerability

Open Bug Bounty ID: OBB-205263 Description| Value ---|--- Affected Website:| bw-krefeld.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

EVA-BW - Verkehrsauskunft - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application EVA-BW - Verkehrsauskunft published at the 'play' market has multiple vulnerabilities...

BW Mobilbanking - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application BW Mobilbanking published at the 'play' market has multiple vulnerabilities...

Unspecified vulnerability in Harman AMX (CNVD-2016-00786)

Harman AMX is a series of conversion controller products from Harman USA. A security vulnerability exists in the 'setUpSubtleUserAccount' function in the /bin/bw URI in versions of Harman AMX prior to 2015-10-12, which stems from the use of hard-coded passwords for BlackWidow accounts. A remote...

CVE-2015-8362

CVE-2015-8362 affects Harman AMX devices (various NetLinx controllers, Massio MCP-10x, Enova DGX/DVX lines, NI/NX series, ME260/64, etc.) where the setUpSubtleUserAccount function in /bin/bw uses a hard-coded BlackWidow diagnostic account password. This creates remote-access risk via SSH or HTTP ...

bw-cct.de XSS vulnerability

Vulnerable URL: http://www.bw-cct.de/sucherg.php Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1281720 Google Pagerank| 5 VIP website status:| No Check...

CVE-2014-8663: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Data Basis BW-WHM-DBA in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2014-8669

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Business Warehouse affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. The vulnerability is related to ...

Design/Logic Flaw

Business Warehouse BW in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain sensitive information via a request to the RSDUCCMSGETPROFILEPARAM RFC function...

CVE-2014-8312: Undefined Security Weakness

Business Warehouse BW in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain sensitive information via a request to the RSDUCCMSGETPROFILEPARAM RFC function...

CVE-2014-5174: Undefined Security Weakness

The SAP Netweaver Business Warehouse component does not properly restrict access to the functions in the BW-SYS-DB-DB4 function group, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

PT-2013-6114

Name of the Vulnerable Software and Affected Versions Blue Wrench Video Widget plugin versions prior to 2.0.0 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that embed arbitrary URLs via the bw url parameter ...

CVE-2011-5260: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SAP/BW/DOC/METADATA in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via the page parameter...

SAP NetWeaver BW - XML External Entity

Application: SAP BW Versions Affected: SAP BASIS 6.40/7.02 maybe others Vendor URL: http://www.sap.com Bugs:XML External Entity Exploits: YES Reported: 13.05.2011 Vendor response: 14.05.2011 Date of Public Advisory: 30.06.2012 Reference: SAP Security Note 1597066 Author: Alexey Tyurin ERPScan...

PT-2011-1056

Name of the Vulnerable Software and Affected Versions Domain Technologie Control DTC versions prior to 0.32.9 Description The issue concerns multiple SQL injection vulnerabilities that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of...

PT-2011-1057

Name of the Vulnerable Software and Affected Versions Domain Technologie Control DTC versions prior to 0.32.9 Description The issue allows remote attackers to obtain potentially sensitive bandwidth information without authentication via direct requests to specific API endpoints, such as "admin/bw...