22 matches found
CVE-2026-31379 Apache OFBiz: Path Traversal and File Upload Validation Bypass Leading to Arbitrary File Write, Stored XSS and RCE in Catalog Manager
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting', Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Improper Control of Generation of Code 'Code Injection' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06...
CVE-2026-31379
Apache OFBiz versions prior to 24.09.06 are vulnerable to a combination of Cross-site Scripting (XSS) , Path Traversal , and Code Injection due to improper input handling. These vulnerabilities specifically affect the Catalog Manager component, where a path traversal and file upload validation by...
CVE-2024-25011
Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...
CVE-2024-25011
Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...
CVE-2024-25011 Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability
Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...
CVE-2024-25011
CVE-2024-25011 affects Ericsson Catalog Manager and Ericsson Order Care APIs. The vulnerability arises because authentication is not enabled by default, allowing potential information disclosure. Remediation guidance states that authentication checks can be configured to remediate the issue. No e...
CVE-2024-25011 Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability
Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...
CVE-2024-25011: Exposure of Sensitive Information to an Unauthorized Actor
Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...
PT-2025-38311
Name of the Vulnerable Software and Affected Versions Ericsson Catalog Manager and Ericsson Order Care APIs affected versions not specified Description Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default, leading to an information disclosure issue...
Ericsson Catalog Manager和Ericsson Order Care 安全漏洞
Ericsson Catalog Manager and Ericsson Order Care are both products of Ericsson, a Swedish company.Ericsson Catalog Manager is a service management platform.Ericsson Order Care is an order management system. A security vulnerability exists in Ericsson Catalog Manager and Ericsson Order Care that...
July 11, 2017—KB4025342 (OS Build 15063.483)
None None...
DmxReady Catalog Manager 1.2 - SQL Injection Vulneratbility
No description provided by source. Exploit Title: DmxReady Catalog Manager v1.2 SQL Injection Vulneratbility Google Dork: inurl:inccatalogmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=catalog-manager-v1 Version: v1.2 Language: ASP Price : $99.97 De...
DMXReady Catalog Manager <= 1.1 - Remote Contents Change Vuln
No description provided by source. Title : DMXReady Catalog Manager = 1.1 Remote Contents Change Vulnerability Author : ajann from Turkey Contact : : S.Page : http://www.dmxready.com $$ : 149.97 $ Dork : inurl:inccatalogmanager.asp DorkEx :...
DmxReady Catalog Manager 1.2 SQL Injection
Exploit Title: DmxReady Catalog Manager v1.2 SQL Injection Vulneratbility Google Dork: inurl:inccatalogmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=catalog-manager-v1 Version: v1.2 Language: ASP Price : $99.97 Demo :...
DmxReady Contact Us Manager 1.2 SQL Injection
Exploit Title:DmxReady Contact Us Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:inccontactusmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=contact-us-manager Version: v1.2 Language: ASP Price : $99.97 Tested on: Windows XP Sp3 Greetz :...
DmxReady Catalog Manager v1.2 SQL Injection Vulneratbility
Exploit for asp platform in category web applications Exploit Title: DmxReady Catalog Manager v1.2 SQL Injection Vulneratbility Google Dork: inurl:inccatalogmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=catalog-manager-v1 Version: v1.2 Language: AS...
DmxReady Catalog Manager 1.2 - SQL Injection
Exploit Title: DmxReady Catalog Manager v1.2 SQL Injection Vulneratbility Google Dork: inurl:inccatalogmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=catalog-manager-v1 Version: v1.2 Language: ASP Price : $99.97 Demo :...
DmxReady Catalog Manager 1.2 - SQL Injection
DmxReady Catalog Manager 1.2 - SQL Injection Exploit Title: DmxReady Catalog Manager v1.2 SQL Injection Vulneratbility Google Dork: inurl:inccatalogmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=catalog-manager-v1 Version: v1.2 Language: ASP Price :...
Catalog Manager Database Disclosure Exploit
Exploit for perl platform in category web applications !/usr/bin/perl -w Catalog Manager Database Disclosure Exploit Found & Coded: indoushka Home: http://www.hack-r1z.com/cc/ Dz-Ghost Team ===== Saoucha Star08 Cyber Sec theblind74 XproratiX onurozkan n2n Meher Assel ===========================...
DMXReady Catalog Manager SQL Injection Vulnerability
Exploit for php platform in category web applications ==================================================== DMXReady Catalog Manager SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...