CVE-2014-2617

Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2104...

CVE-2014-2615

Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2083...

Design/Logic Flaw

Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2104...

Code injection

Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2091...

CVE-2014-2616

Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2091...

CVE-2014-2615

HP Universal CMDB CVE-2014-2615 affects v10.01 and v10.10 with remote code execution and information disclosure (ZDI-CAN-2083). The related HP security bulletin HPSBMU03064 rev.1 states the vulnerabilities (CVE-2014-2615, -2616, -2617) could be exploited remotely to disclose information and execu...

CVE-2014-2617

Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2104...

CVE-2014-2617

HP Universal CMDB versions 10.01 and 10.10 are affected by CVE-2014-2617, a remote code execution/ information disclosure vulnerability. The HP Security Bulletin HPSBMU03064 rev.1 attributes this to remote access with default configuration and, per companion advisories, hard-coded credentials tha...

CVE-2014-2616

CVE-2014-2616 affects HP Universal CMDB versions 10.01 and 10.10. The vulnerability allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors (ZDI-CAN-2091); CVSS v2 base score 7.5 (NETWORK, LOW access complexity, NO authentication). HP’s security bulle...

CVE-2014-2615

Unspecified vulnerability in HP Universal CMDB 10.01 and 10.10 allows remote attackers to execute arbitrary code or obtain sensitive information via unknown vectors, aka ZDI-CAN-2083...

PHP-CMDB 0.7.3 - Multiple Vulnerabilities

No description provided by source. ============================================================== Title ...| Multiple vulnerabilities in PHP-CMDB Version .| php-cmdb0.7.3 Date ....| 27.02.2014 Found ...| HauntIT Blog Home ....| ============================================================== + From...

Hewlett-Packard Universal CMDB Integration Service UploadScansServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Universal Configuration Management Database CMDB. Authentication is required to exploit this vulnerability, but it is trivial to bypass. The specific flaw exists in the handling of...

synetics i-doit pro API跨站脚本漏洞

BUGTRAQ ID：65957 CVE ID：CVE-2014-2231 Synetics i-doit是德国Synetics公司的一个基于Web的开源IT文档和CMDB（配置管理数据库），它能够记录IT系统及其变化的信息，同时针对系统变化制定应急方案，最终确保IT网络稳定、高效的运作。 synetics i-doit 1.2.5之前版本的的API存在跨站脚本漏洞，允许远程攻击者通过产权注入任意的web脚本或HTML。 0 synetics GmbH i-doit 1.2.4 synetics GmbH i-doit 1.1.1 synetics GmbH i-doit 1.1.2...

PHP-CMDB 0.7.3 - Multiple Vulnerabilities

PHP-CMDB 0.7.3 - Multiple Vulnerabilities ============================================================== Title ...| Multiple vulnerabilities in PHP-CMDB Version .| php-cmdb0.7.3 Date ....| 27.02.2014 Found ...| HauntIT Blog Home ....| ==============================================================...

PHP-CMDB 0.7.3 - Multiple Vulnerabilities

Exploit for php platform in category web applications ============================================================== Title ...| Multiple vulnerabilities in PHP-CMDB Version .| php-cmdb0.7.3 Date ....| 27.02.2014 Found ...| HauntIT Blog Home ....|...

PHP-CMDB 0.7.3 - Multiple Vulnerabilities

============================================================== Title ...| Multiple vulnerabilities in PHP-CMDB Version .| php-cmdb0.7.3 Date ....| 27.02.2014 Found ...| HauntIT Blog Home ....| ============================================================== + From admin logged-in...

CVE-2014-1597

SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remote attackers to execute arbitrary SQL commands via the objID parameter to the default URI...

Sql injection

SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remote attackers to execute arbitrary SQL commands via the objID parameter to the default URI...

CVE-2014-1597

The CVE-2014-1597 issue affects i-doit Pro (and i-doit open) prior to version 1.2.5, where the CMDB web application exposes an SQL injection via the objID parameter in the default URI. The underlying flaw allows remote attackers to execute arbitrary SQL commands, enabling data manipulation or ext...

PHP-CMDB 0.7.3 Cross Site Scripting / SQL Injection

============================================================== Title ...| Multiple vulnerabilities in PHP-CMDB Version .| php-cmdb0.7.3 Date ....| 27.02.2014 Found ...| HauntIT Blog Home ....| ============================================================== + From admin logged-in...