EUVD-2008-3357

Malware in sbrugna...

EMC Centera Universal Access 4.0_4735.p4 'username' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30358/info EMC Centera Universal Access CUA is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application...

CVE-2008-3370

SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access CUA 4.04735.p4 allows remote attackers to execute arbitrary SQL commands via the user user name field...

Sql injection

SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access CUA 4.04735.p4 allows remote attackers to execute arbitrary SQL commands via the user user name field...

CVE-2008-3370

SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access CUA 4.04735.p4 allows remote attackers to execute arbitrary SQL commands via the user user name field...

CVE-2008-3370

The CVE-2008-3370 entry documents a SQL injection vulnerability in the EMC Centera Universal Access (CUA) 4.0_4735.p4, specifically in the CUA Login Module. The vulnerability allows remote attackers to execute arbitrary SQL commands through the user name field in the login form. According to NVD,...

EMC Centera Universal Access username参数SQ注入漏洞

BUGTRAQ ID: 30358 CENTERA Universal Access是EMC公司的CENTERA存储系统的管理软件。 CENTERA Universal Access没有正确过滤CUA Module Login中的用户名字段，远程攻击者可以通过“--”句法绕过出口令检查，使用表格中第一个可用的用户名登录。在执行几次尝试或通过搜索CUA Module中的Accounts标签后，攻击者就可以收集所有用户名列表，然后选择出管理员帐号并在用户名后添加“--”登录到系统。 EMC Centera Universal Access 4.04735.p4 EMC ---...

EMC Centera Universal Access 4.0_4735.p4 - Username SQL Injection

EMC Centera Universal Access 4.04735.p4 - Username SQL Injection source: https://www.securityfocus.com/bid/30358/info EMC Centera Universal Access CUA is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacke...

emc-sql.txt

adMERITia Vulnerability Report Vulnerability Information Vendor: EMC² Product: Centera Universal Access Version: CUA4.04735.p4 Vulnerability Type: Software Flaw Vulnerability: SQL Injection Impact: Attacker can bypass the authentication method and will be logged in as an arbitrary user. With...

EMC Centera Universal Access 4.0_4735.p4 - 'Username' SQL Injection

source: https://www.securityfocus.com/bid/30358/info EMC Centera Universal Access CUA is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploi...