ZDI-12-139 : SAP Crystal Reports crystalras.exe OBUnmarshal Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-139 : SAP Crystal Reports crystalras.exe OBUnmarshal Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-139 August 17, 2012 - -- CVE ID: - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C - -- Affected Vendors: SAP - ...

SAP Crystal Reports crystalras.exe OBUnmarshal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Crystal Reports. Authentication is not required to exploit this vulnerability. The flaw exists within the ebus-3-3-2-7.dll component which is used by the crystalras.exe service. This process...

Crystal Office Suite 1.43 Buffer Overflow

Title: ====== Crystal Office Suite v1.43 - Buffer Overflow Vulnerability Date: ===== 2012-04-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=489 VL-ID: ===== 489 Introduction: ============= Crystal Office is the essential office suite ideal for home and business user...

Crystal Office Suite v1.43 - Buffer Overflow Vulnerability

Document Title: =============== Crystal Office Suite v1.43 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=489 Release Date: ============= 2012-04-11 Vulnerability Laboratory ID VL-ID: ====================================...

Crystal Office Suite v1.43 - Buffer Overflow Vulnerability

Document Title: =============== Crystal Office Suite v1.43 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=489 Release Date: ============= 2012-04-11 Vulnerability Laboratory ID VL-ID: ====================================...

Def-Blog v1.0.3 sql injection vulnerability

Exploit for php platform in category web applications +-------------------------------------------------------------------------+ Exploit Title : Def-Blog v1.0.3 sql injection Vulnerability version : V 1.0.3 and V 1.0.2 Author : Cyber-Crystal Date : n/a Software Link :...

Peel Shopping 2.8 2.9 - Cross-Site Scripting SQL Injections

Peel Shopping 2.8 2.9 - Cross-Site Scripting SQL Injections +-------------------------------------------------------------------------+ Exploit Title : Peel SHOPPING - version 2.8 and version 2.9 xss/sql inject Vulnerability version : v2.9 Author : Cyber-Crystal Date : n/a Software Link :...

VR GPub 4.0 CSRF Vulnerability

Exploit for php platform in category web applications +-------------------------------------------------------------------------+ Exploit Title : VR GPub 4.0 CSRF Vulnerability version : VR GPub 4.0 Author : Cyber-Crystal Date : n/a Dork : inurl:"VR GPub" Software Link :...

phplist - version 2.10.9 CSRF/XSS Vulnerability

Exploit for php platform in category web applications +-------------------------------------------------------------------------+ Exploit Title : phplist - version 2.10.9 CSRF/XSS Vulnerability version : 2.10.9 Author : Cyber-Crystal Date : n/a Dork : inurl:"powered by phplist - version 2.10.9"...

VR GPub 4.0 Cross Site Request Forgery

+-------------------------------------------------------------------------+ Exploit Title : VR GPub 4.0 CSRF Vulnerability version : VR GPub 4.0 Author : Cyber-Crystal Date : n/a Dork : inurl:"VR GPub" Software Link : http://www.easy-script.com/scripts-PHP/vr-gpub-3907.html...

Peel SHOPPING => v2.9 xss/sql injection vulnerability

Exploit for php platform in category web applications +-------------------------------------------------------------------------+ Exploit Title : Peel SHOPPING - version 2.8 and version 2.9 xss/sql inject Vulnerability version : v2.9 Author : Cyber-Crystal Date : n/a Software Link :...

PHPList 2.10.9 Cross Site Request Forgery / Cross Site Scripting

+-------------------------------------------------------------------------+ Exploit Title : phplist - version 2.10.9 CSRF/XSS Vulnerability version : 2.10.9 Author : Cyber-Crystal Date : n/a Dork : inurl:"powered by phplist - version 2.10.9" Software Link : http://www.phplist.com/...

Peel SHOPPING 2.8 / 2.9 Cross Site Scripting / SQL Injection

+-------------------------------------------------------------------------+ Exploit Title : Peel SHOPPING - version 2.8 and version 2.9 xss/sql inject Vulnerability version : v2.9 Author : Cyber-Crystal Date : n/a Software Link : http://www.peel.fr/ || or...

phpList 2.10.9 - Cross-Site Request Forgery Cross-Site Scripting

phpList 2.10.9 - Cross-Site Request Forgery Cross-Site Scripting +-------------------------------------------------------------------------+ Exploit Title : phplist - version 2.10.9 CSRF/XSS Vulnerability version : 2.10.9 Author : Cyber-Crystal Date : n/a Dork : inurl:"powered by phplist - versio...

VR GPub 4.0 - Cross-Site Request Forgery

VR GPub 4.0 - Cross-Site Request Forgery +-------------------------------------------------------------------------+ Exploit Title : VR GPub 4.0 CSRF Vulnerability version : VR GPub 4.0 Author : Cyber-Crystal Date : n/a Dork : inurl:"VR GPub" Software Link :...

Peel Shopping 2.8/ 2.9 - Cross-Site Scripting / SQL Injections

+-------------------------------------------------------------------------+ Exploit Title : Peel SHOPPING - version 2.8 and version 2.9 xss/sql inject Vulnerability version : v2.9 Author : Cyber-Crystal Date : n/a Software Link : http://www.peel.fr/ || or...

PHPDomainRegister 0.4a-RC2-dev Cross Site Scripting / SQL Injection

Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs m4n i-Hmx Cyber-Crystal | | Dr.Bnned ahwak2000 sa^Dev!L |...

CVE-2011-4805

Cross-site scripting XSS vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008 allows remote attackers to inject arbitrary web script or HTML via the service parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008 allows remote attackers to inject arbitrary web script or HTML via the service parameter...

CVE-2011-4805

SAP Crystal Reports Server 2008 is affected by a Cross-site scripting (XSS) vulnerability in pubDBLogon.jsp, allowing remote attackers to inject arbitrary web script or HTML via the service parameter. The issue is described for SAP Crystal Reports Server 2008; no further technical details (affect...