5353 matches found
CVE-2016-1416
Cisco Prime Collaboration Provisioning 10.6 SP2 aka 10.6.0.10602 mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513...
CVE-2016-1416
CVE-2016-1416 affects Cisco Prime Collaboration Provisioning 10.6 SP2 (10.6.0.10602). The root cause is an improper implementation of LDAP authentication, allowing a remote attacker to bypass authentication and gain full administrator privileges via a crafted login attempt. Multiple connected sou...
PT-2016-4772
Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning version 10.6 SP2 aka 10.6.0.10602 Description The issue is related to mishandled LDAP authentication, allowing remote attackers to obtain administrator privileges via a crafted login attempt...
CVE-2016-1416: Undefined Security Weakness
Cisco Prime Collaboration Provisioning 10.6 SP2 aka 10.6.0.10602 mishandles LDAP authentication, which allows remote attackers to obtain administrator privileges via a crafted login attempt, aka Bug ID CSCuv37513...
Cisco Prime Collaboration Provisioning Lightweight Directory Access Protocol Authentication Bypass Vulnerability
Cisco Prime Collaboration Provisioning is a Web-based, next-generation communications services solution from Cisco. The solution provides IP communication services capabilities for IP telephony, voicemail, and unified communications environments. An authentication bypass vulnerability exists in t...
Cisco Prime Collaboration Provisioning Lightweight Directory Access Protocol Authentication Bypass Vulnerability
A vulnerability in the Lightweight Directory Access Protocol LDAP authentication for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges. The vulnerability is due to...
Blue Ling EIS wisdom collaboration platform /sm/menu_left_edit. aspx injection vulnerability
No description provided by source...
Blue Ling EIS wisdom collaboration platform /vote/service. aspx injection vulnerability
No description provided by source...
CVE-2016-1437
SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549...
CVE-2016-1437
SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549...
Sql injection
SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549...
CVE-2016-1437
CVE-2016-1437 is a SQL injection vulnerability in the SQL database of Cisco Prime Collaboration Deployment, affecting versions prior to 11.5.1. The flaw allows remote authenticated users to execute arbitrary SQL commands via a crafted URL (Bug CSCuy92549). Exploitation relies on inadequate input ...
CVE-2016-1437: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549...
PT-2016-4787
Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Deployment versions prior to 11.5.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands via a crafted URL. This can be achieved by exploiting a SQL injection vulnerability in the...
CVE-2016-1437
SQL injection vulnerability in the SQL database in Cisco Prime Collaboration Deployment before 11.5.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy92549...
Cisco Prime Collaboration Deployment SQL Injection Vulnerability
Cisco Prime Collaboration Deployment is a suite of software for managing Unified Communications UC applications from the U.S. company Cisco Cisco. A SQL injection vulnerability exists in Cisco Prime Collaboration Deployment using software versions prior to 11.5.1. A remote attacker could exploit...
Cisco Prime Collaboration Deployment SQL Injection Vulnerability
A vulnerability in the interface of the Cisco Prime Collaboration Deployment SQL database could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. The vulnerability is due to a lack of input validation for user-supplied input in...
SQL Injection Vulnerability in the LoginName Parameter of the Collaboration Office System of Shanghai CITIC Information Development Co.
CITIC Shanghai Information Development Co., Ltd. collaborative office system is a set of online office automation software A SQL injection vulnerability exists in the loginName parameter of the CITIC Information Development Co., Ltd. collaborative office system, which can be exploited by an...
Cisco Prime Collaboration Provisioning SQL Injection Vulnerability (cisco-sa-20151008-pcp)
A vulnerability in web framework of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to execute unauthorized SQL queries. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
Cisco Prime Collaboration Assurance Detection
This script performs ssh based detection of Cisco Prime Collaboration Assurance SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...