870 matches found
Command injection
Unspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allow remote authenticated users to execute arbitrary commands via shell metacharacters in unspecified vectors aka "shell command injection"...
CVE-2007-1490
CVE-2007-1490 affects Avaya equipment (S87XX, S8500, S8300 prior to CM 3.1.3 and Avaya SES). The issue is shell command injection via shell metacharacters in unspecified maintenance web pages/entry points, exploitable by remote authenticated users. Affected component/functionality is unspecified;...
CVE-2007-1491
CVE-2007-1491 affects Avaya/S87XX, S8500, and S8300 platforms running Avaya CM prior to 3.1.3, where Apache Tomcat allows external-interface connections via port 8009. This exposure can enable external access from outside networks. The vulnerability is tied to the misconfiguration/exposure of por...
CVE-2006-6269
Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in rating.asp, 2 the mealid parameter in mealrest.asp, and 3 the resid parameter in resdetails.asp...
CVE-2006-6269
Infinitytechs Restaurants CM is affected by SQL injection in three parameters: id (rating.asp), mealid (meal_rest.asp), and resid (res_details.asp). The underlying issue is improper handling of input in SQL queries, enabling remote attackers to craft arbitrary SQL commands. The CVE entry notes a ...
CVE-2006-6269
Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in rating.asp, 2 the mealid parameter in mealrest.asp, and 3 the resid parameter in resdetails.asp...
CVE-2006-6269: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in rating.asp, 2 the mealid parameter in mealrest.asp, and 3 the resid parameter in resdetails.asp...
infinsql.txt
product:Infinitytechs Restaurants CM bug:injection sql risk:medium injection sql: /rating.asp?id='sql /mealrest.asp?mealid='sql /resdetails.asp?resid='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...
Infinitytechs Restaurants CM
product:Infinitytechs Restaurants CM bug:injection sql risk:medium injection sql: /rating.asp?id='sql /mealrest.asp?mealid='sql /resdetails.asp?resid='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...
