882 matches found
eGov Content Manager Cross Site Scripting Vulrnability
HSC eGov Content Manager Cross Site Scripting Vulrnability The eGov Manager was designed to simplify the efforts of government staffers who are responsible for posting public documents, news updates, events, managing staff directories and online services. This issue is due to a failure in the...
Micro CMS 3.5 (revert-content.php) Remote SQL Injection Vulnerability
No description provided by source. not sec group http://www.notsec.com [email protected] Micro CMS 3.5 Class: SQL Injection Found: 28/08/2007 Remote: Yes Site: http://www.impliedbydesign.com/ibd-micro-cms-static-content-manager.html Download: http://www.impliedbydesign.com/apps/microcms/microcms.zi...
iDefense Security Advisory 06.21.07: Ingres Database Multiple Heap Corruption Vulnerabilities
Ingres Database Multiple Heap Corruption Vulnerabilities iDefense Security Advisory 06.21.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 21, 2007 I. BACKGROUND Ingres is the database backend used by default in several CA products. The SCM Secure Content Manager is one of the produc...
CVE-2007-3334
Multiple heap-based buffer overflows in the 1 Communications Server iigcc.exe and 2 Data Access Server iigcd.exe components for Ingres Database Server 3.0.3, as used in CA Computer Associates products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitra...
Heap overflow
Multiple heap-based buffer overflows in the 1 Communications Server iigcc.exe and 2 Data Access Server iigcd.exe components for Ingres Database Server 3.0.3, as used in CA Computer Associates products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitra...
CVE-2007-3334
CVE-2007-3334 affects Ingres Database (3.0.3) components used in CA products (eTrust Secure Content Manager on Windows). A remote, unauthenticated attacker can exploit heap-based buffer overflows in the Communications Server (iigcc.exe) and Data Access Server (iigcd.exe) by sending specially craf...
CVE-2007-3334
Multiple heap-based buffer overflows in the 1 Communications Server iigcc.exe and 2 Data Access Server iigcd.exe components for Ingres Database Server 3.0.3, as used in CA Computer Associates products including eTrust Secure Content Manager r8 on Windows, allow remote attackers to execute arbitra...
Ingress Database Server 2.6 - Multiple Remote Vulnerabilities
source: https://www.securityfocus.com/bid/24585/info Ingress Database Server included in CA eTrust Secure Content Manager is prone to multiple remote vulnerabilities, including multiple stack- and heap-based buffer-overflow issues, multiple pointer-overwrite issues, and an arbitrary-file-overwrit...
CVE-2007-1786
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote...
CVE-2007-1786
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote...
CVE-2007-1786: Undefined Security Weakness
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote...
CVE-2006-5777
Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged functions via a non-empty finame parameter to 1 addnewcont.php, 2 adminpassw.php, 3 amministrazione.php, 4 artins.php, 5 bgcolor.php, 6 cancartcat.php, 7 canccat.php, 8 cancelart.php...
CVE-2006-5777
CVE-2006-5777 affects Creasito E-Commerce Content Manager 1.3.08. The vulnerability allows remote attackers to bypass authentication and perform privileged functions by supplying a non-empty finame parameter to a long list of admin scripts (e.g., addnewcont.php, adminpassw.php, amministrazione.ph...
CVE-2006-5777: Undefined Security Weakness
Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged functions via a non-empty finame parameter to 1 addnewcont.php, 2 adminpassw.php, 3 amministrazione.php, 4 artins.php, 5 bgcolor.php, 6 cancartcat.php, 7 canccat.php, 8 cancelart.php...
Creasito E-Commerce Content Manager - 'admin' Authentication Bypass
============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass ============================================================================================ Product............: Creasito E-Commerce Conten...
Creasito E-Commerce Content Manager (admin) Authentication Bypass
Exploit for unknown platform in category web applications 0day.today 2018-04-10...
Creasito E-Commerce Content Manager - admin Authentication Bypass
Creasito E-Commerce Content Manager - admin Authentication Bypass ============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass...
CVE-2006-4609: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in the Content Management module "Content manager" for PHProjekt 0.6.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via the pathpre parameter in 1 cmlib.inc.php, 2 doc/br.edithelp.php, 3...
Assault Content Manager v.1.2 Directory Traverlal Vulnerability
Assault Content Manager v.1.2 Directory Traverlal Vulnerability SEVERITY: ========= Medium SOFTWARE: ========= Assault Content Manager v1.2 http://www.assaultcms.com/ INFO: ===== Assault Content Manager v1.2 is a simple CMS that uses files to store information DESCRIPTION: ============ Assault...
[SA19215] Jupiter Content Manager "image" BBcode Script Insertion
TITLE: Jupiter Content Manager "image" BBcode Script Insertion SECUNIA ADVISORY ID: SA19215 VERIFY ADVISORY: http://secunia.com/advisories/19215/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Jupiter Content Manager 1.x http://secunia.com/product/8685/...